fix netty's CVE-2025-55163

stankiewicz · stankiewicz · commit 874a77c9e594 · 2025-09-10T09:35:42.000+02:00
diff --git a/buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy b/buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy
@@ -631,7 +631,7 @@ class BeamModulePlugin implements Plugin<Project> {
     def log4j2_version = "2.20.0"
     def nemo_version = "0.1"
     // [bomupgrader] determined by: io.grpc:grpc-netty, consistent with: google_cloud_platform_libraries_bom
-    def netty_version = "4.1.118.Final"
+    def netty_version = "4.1.127.Final"
     def postgres_version = "42.2.16"
     // [bomupgrader] determined by: com.google.protobuf:protobuf-java, consistent with: google_cloud_platform_libraries_bom
     def protobuf_version = "4.29.4"
diff --git a/sdks/java/extensions/sql/hcatalog/build.gradle b/sdks/java/extensions/sql/hcatalog/build.gradle
@@ -26,7 +26,7 @@ applyJavaNature(
 )
 
 def hive_version = "3.1.3"
-def netty_version = "4.1.110.Final"
+def netty_version = "4.1.127.Final"
 
 /*
  * We need to rely on manually specifying these evaluationDependsOn to ensure that

Original file line number	Diff line number	Diff line change
`@@ -26,7 +26,7 @@ applyJavaNature(`
`26`	`26`	`)`
`27`	`27`
`28`	`28`	`def hive_version = "3.1.3"`
`29`		`-def netty_version = "4.1.110.Final"`
	`29`	`+def netty_version = "4.1.127.Final"`
`30`	`30`
`31`	`31`	`/*`
`32`	`32`	`* We need to rely on manually specifying these evaluationDependsOn to ensure that`