diff options
| author |   jitendra sharma <jitendra.sharma1@huawei.com> | 2020-03-13 06:31:30 +0000 |
|---|---|---|
| committer | jitendra sharma <jitendra.sharma1@huawei.com> | 2020-03-13 06:35:34 +0000 |
| commit | a7b4c2d599d2ea871c033b8757f7a5312e0e18f4 (patch) | |
| tree | 8521e82af1333809bbdc7a49ddcea4ac0dd8efc4 | |
| parent | fe3b9a8559642a757b971ead4763c22e74844c2d (diff) | |
change version for netty-codec
Issue-ID: CLI-246
Signed-off-by: jitendra sharma <jitendra.sharma1@huawei.com>
Change-Id: If16e3c225639d50c7b059abd04af41af4f08b48c
| -rw-r--r-- | grpc/pom.xml | 16 | ||||
| -rw-r--r-- | profiles/http/pom.xml | 2 |
2 files changed, 5 insertions, 13 deletions
diff --git a/grpc/pom.xml b/grpc/pom.xml index 6ad4a47a..dbef4b00 100644 --- a/grpc/pom.xml +++ b/grpc/pom.xml @@ -35,7 +35,7 @@ </properties> <dependencies> <!-- netty-codec-http2 excluded due to Security Issues:- CVE-2019-9512,CVE-2019-9514,CVE-2019-9515,CVE-2019-9518,CVE-2019-16869 - and added invulnerable netty-codec-http2 4.1.42.Final --> + and added invulnerable netty-codec-http2 4.1.46.Final --> <dependency> <groupId>io.grpc</groupId> <artifactId>grpc-netty</artifactId> @@ -47,21 +47,13 @@ </exclusion> </exclusions> </dependency> - <!-- excluded netty-codec-http and added invulnerable version --> + <dependency> <groupId>io.netty</groupId> <artifactId>netty-codec-http2</artifactId> - <version>4.1.42.Final</version> - <exclusions><exclusion> - <groupId>io.netty</groupId> - <artifactId>netty-codec-http</artifactId> - </exclusion></exclusions> + <version>4.1.46.Final</version> </dependency> - <dependency> - <groupId>io.netty</groupId> - <artifactId>netty-codec-http</artifactId> - <version>4.1.45.Final</version> - </dependency> + <dependency> <groupId>io.grpc</groupId> <artifactId>grpc-protobuf</artifactId> diff --git a/profiles/http/pom.xml b/profiles/http/pom.xml index 3410b634..2c1b39a2 100644 --- a/profiles/http/pom.xml +++ b/profiles/http/pom.xml @@ -115,7 +115,7 @@ Excluded commons-codec vulnerable version and added invulnerable version <dependency> <groupId>io.netty</groupId> <artifactId>netty-codec-http</artifactId> - <version>4.1.45.Final</version> + <version>4.1.46.Final</version> </dependency> <dependency> <groupId>junit</groupId> |