Skip to content

Test Netty 4.2.13#55737

Draft
LuciferYang wants to merge 1 commit intoapache:masterfrom
LuciferYang:netty-4.2.13
Draft

Test Netty 4.2.13#55737
LuciferYang wants to merge 1 commit intoapache:masterfrom
LuciferYang:netty-4.2.13

Conversation

@LuciferYang
Copy link
Copy Markdown
Contributor

What changes were proposed in this pull request?

Why are the changes needed?

Does this PR introduce any user-facing change?

How was this patch tested?

Was this patch authored or co-authored using generative AI tooling?

@LuciferYang LuciferYang marked this pull request as draft May 7, 2026 15:29
@LuciferYang
Copy link
Copy Markdown
Contributor Author

This version includes the following CVE fixes:

CVE-2026-42586 (netty-codec-redis)
CVE-2026-42578 (netty-handler-proxy)
CVE-2026-42577 (netty-transport-native-epoll)
CVE-2026-42587 (netty-codec-http, netty-codec-http2)
CVE-2026-41417 (netty-codec-http)
CVE-2026-42581 (netty-codec-http)
CVE-2026-42580 (netty-codec-http)
CVE-2026-42585 (netty-codec-http)
CVE-2026-42579 (netty-codec-dns)
CVE-2026-42582 (netty-codec-http3)
CVE-2026-42583 (netty-codec, netty-codec-compression)
CVE-2026-42584 (netty-codec-http)
CVE-2026-44248 (netty-codec-mqtt)

Copy link
Copy Markdown
Member

@dongjoon-hyun dongjoon-hyun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you, @LuciferYang . Please note that we decide to have 1-week grace period for dependency update.

@LuciferYang
Copy link
Copy Markdown
Contributor Author

Thank you, @LuciferYang . Please note that we decide to have 1-week grace period for dependency update.

Yes, I'm aware of that. Let's run some tests first.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants