Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update netty to 4.1.118 for CVE-2025-24970 #8275

Merged
merged 2 commits into from
Feb 11, 2025

Conversation

matthew1001
Copy link
Contributor

PR description

Update netty to address HIGH CVE https://nvd.nist.gov/vuln/detail/CVE-2025-24970

Copy link
Contributor

@fab-10 fab-10 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add a CHANGELOG entry

@fab-10
Copy link
Contributor

fab-10 commented Feb 11, 2025

Update the title to match the correct version

@matthew1001 matthew1001 changed the title Update netty to 4.1.115 for CVE-2025-24970 Update netty to 4.1.118 for CVE-2025-24970 Feb 11, 2025
Signed-off-by: Matthew Whitehead <[email protected]>
@matthew1001
Copy link
Contributor Author

Update the title to match the correct version

I suspect you fixed the PR to match the commit text - but I made a mistake in the commit message and put the wrong version. So I've just re-updated the title to the correct version.

@matthew1001 matthew1001 enabled auto-merge (squash) February 11, 2025 13:50
@matthew1001 matthew1001 merged commit a45475d into hyperledger:main Feb 11, 2025
43 checks passed
@fab-10
Copy link
Contributor

fab-10 commented Feb 11, 2025

Update the title to match the correct version

I suspect you fixed the PR to match the commit text - but I made a mistake in the commit message and put the wrong version. So I've just re-updated the title to the correct version.

I had not touched the title

@fab-10 fab-10 mentioned this pull request Feb 11, 2025
9 tasks
@matthew1001
Copy link
Contributor Author

Update the title to match the correct version

My bad - I read "Update the title to match the correct version" as if you had updated it. Ignore my previous comment :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants