aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorjitendra sharma <jitendra.sharma1@huawei.com>2020-03-13 06:31:30 +0000
committerjitendra sharma <jitendra.sharma1@huawei.com>2020-03-13 06:35:34 +0000
commita7b4c2d599d2ea871c033b8757f7a5312e0e18f4 (patch)
tree8521e82af1333809bbdc7a49ddcea4ac0dd8efc4
parentfe3b9a8559642a757b971ead4763c22e74844c2d (diff)
change version for netty-codec
Issue-ID: CLI-246 Signed-off-by: jitendra sharma <jitendra.sharma1@huawei.com> Change-Id: If16e3c225639d50c7b059abd04af41af4f08b48c
-rw-r--r--grpc/pom.xml16
-rw-r--r--profiles/http/pom.xml2
2 files changed, 5 insertions, 13 deletions
diff --git a/grpc/pom.xml b/grpc/pom.xml
index 6ad4a47a..dbef4b00 100644
--- a/grpc/pom.xml
+++ b/grpc/pom.xml
@@ -35,7 +35,7 @@
</properties>
<dependencies>
<!-- netty-codec-http2 excluded due to Security Issues:- CVE-2019-9512,CVE-2019-9514,CVE-2019-9515,CVE-2019-9518,CVE-2019-16869
- and added invulnerable netty-codec-http2 4.1.42.Final -->
+ and added invulnerable netty-codec-http2 4.1.46.Final -->
<dependency>
<groupId>io.grpc</groupId>
<artifactId>grpc-netty</artifactId>
@@ -47,21 +47,13 @@
</exclusion>
</exclusions>
</dependency>
- <!-- excluded netty-codec-http and added invulnerable version -->
+
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-http2</artifactId>
- <version>4.1.42.Final</version>
- <exclusions><exclusion>
- <groupId>io.netty</groupId>
- <artifactId>netty-codec-http</artifactId>
- </exclusion></exclusions>
+ <version>4.1.46.Final</version>
</dependency>
- <dependency>
- <groupId>io.netty</groupId>
- <artifactId>netty-codec-http</artifactId>
- <version>4.1.45.Final</version>
- </dependency>
+
<dependency>
<groupId>io.grpc</groupId>
<artifactId>grpc-protobuf</artifactId>
diff --git a/profiles/http/pom.xml b/profiles/http/pom.xml
index 3410b634..2c1b39a2 100644
--- a/profiles/http/pom.xml
+++ b/profiles/http/pom.xml
@@ -115,7 +115,7 @@ Excluded commons-codec vulnerable version and added invulnerable version
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-codec-http</artifactId>
- <version>4.1.45.Final</version>
+ <version>4.1.46.Final</version>
</dependency>
<dependency>
<groupId>junit</groupId>