Repository navigation

[Java] Upgrade Netty due to CVE #36209

Closed

Assignees

Labels

Component: JavaCritical FixType: bug

Milestone

opened

on Jun 21, 2023

Describe the bug, including details regarding any error messages, version, and platform.

CVE GHSA-6mjq-h674-j845 fixed in Netty 4.1.94.Final

I don't think this relates to Arrow usage with Netty, but there is an API change that Arrow is not compatible with and needs a patch.

Component(s)

Java

BryanCutler
added
Type: bug
on Jun 21, 2023
BryanCutler
self-assigned this
on Jun 21, 2023
github-actions
added
Component: Java
on Jun 21, 2023
BryanCutler
added
Critical FixBugfixes for security vulnerabilities, crashes, or invalid data.
on Jun 21, 2023
lidavidm
closed this as completedin #36211 on Jun 21, 2023
lidavidm
added a commit that references this issue on Jun 21, 2023
GH-36209: [Java] Upgrade Netty due to security vulnerability (#36211)
ea4f03a
lidavidm
added this to the 13.0.0 milestone on Jun 21, 2023
lriggs
added 3 commits that reference this issue on Jun 28, 2023
apacheGH-36209: [Java] Upgrade Netty due to security vulnerability (a…
16ceb2c
apacheGH-36209: [Java] Upgrade Netty due to security vulnerability (a…
ab2495b
Use local based ccache for Mac build instead of sscache. (#28)
d61ca1c
zhfeng commented on Jun 30, 2023
zhfeng
on Jun 30, 2023
Hi @lidavidm @BryanCutler , is there any plan to backport this fix to 10.0.x?
lidavidm commented on Jun 30, 2023
lidavidm
on Jun 30, 2023
Member
@zhfeng not at the moment. You can discuss on dev@arrow.apache.org (https://arrow.apache.org/community/) but so far I don't think we will even backport to 12.0.x.
lriggs
added 2 commits that reference this issue on Jul 13, 2023
apacheGH-36209: [Java] Upgrade Netty due to security vulnerability (a…
2a83284
Use local based ccache for Mac build instead of sscache. (#28)
cd8858f
lriggs
added 4 commits that reference this issue on Jul 21, 2023
apacheGH-36209: [Java] Upgrade Netty due to security vulnerability (a…
81d69b0
Use local based ccache for Mac build instead of sscache. (#28)
0266432
Use local based ccache for Mac build instead of sscache. (#28)
0213f5d
apacheGH-36209: [Java] Upgrade Netty due to security vulnerability (a…
ba92683
xxlaykxx
added a commit that references this issue on Oct 29, 2023
Use local based ccache for Mac build instead of sscache. (#28)
1503ac8
DenisTarasyuk
added 2 commits that reference this issue on Dec 19, 2023
Use local based ccache for Mac build instead of sscache. (#28)
31d8a1e
apacheGH-36209: [Java] Upgrade Netty due to security vulnerability (a…
1b7a68e
DenisTarasyuk
added a commit that references this issue on Jan 16, 2024
Use local based ccache for Mac build instead of sscache. (#28)
3dd0c33
DenisTarasyuk
added a commit that references this issue on Mar 6, 2024
Use local based ccache for Mac build instead of sscache. (#28)
5073b5a
lriggs
added a commit that references this issue on Mar 12, 2024
Use local based ccache for Mac build instead of sscache. (dremio#28)
a752586
lriggs
added a commit that references this issue on Apr 25, 2024
Use local based ccache for Mac build instead of sscache. (dremio#28)
8404e8f
stevelorddremio
added a commit that references this issue on Jun 14, 2024
Use local based ccache for Mac build instead of sscache. (dremio#28)
18d64fe
lriggs
added 2 commits that reference this issue on Sep 3, 2024
Use local based ccache for Mac build instead of sscache. (dremio#28)
6dd1d25
Use local based ccache for Mac build instead of sscache. (dremio#28)
60ae843
lriggs
added a commit that references this issue on Dec 9, 2024
Use local based ccache for Mac build instead of sscache. (dremio#28)
026d230
pribor
added a commit that references this issue on Oct 24, 2025
apacheGH-36209: [Java] Upgrade Netty due to security vulnerability (a…
dad96d3

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

BryanCutler

Labels

Component: JavaCritical FixType: bug

Type

No type

Projects

No projects

Milestone

13.0.0

Relationships

None yet

Development

No branches or pull requests