Skip to content

CASSJAVA-128 Upgrade Netty to 4.1.130 on 3.x#2089

Open
absurdfarce wants to merge 1 commit into
apache:3.xfrom
absurdfarce:cassjava128
Open

CASSJAVA-128 Upgrade Netty to 4.1.130 on 3.x#2089
absurdfarce wants to merge 1 commit into
apache:3.xfrom
absurdfarce:cassjava128

Conversation

@absurdfarce
Copy link
Copy Markdown
Contributor

@absurdfarce absurdfarce commented May 12, 2026

Mirroring similar work done for 4.x

Comment thread pom.xml
<netty.version>4.1.119.Final</netty.version>
<netty-tcnative.version>2.0.70.Final</netty-tcnative.version>
<netty.version>4.1.130.Final</netty.version>
<netty-tcnative.version>2.0.74.Final</netty-tcnative.version>
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Following convention tcnative is updated to the version specified in the corresponding Netty POM

@absurdfarce
Copy link
Copy Markdown
Contributor Author

absurdfarce commented May 13, 2026

@tolbertam mentioned that we should include the lz4 updates that were on the original 4.x PR (since that was the primary point of the PR in question). Only problem is the version of the lz4 impl we switched to in that PR is built for Java7 and up... and we need that version to get the CVE fix.

Still discussing what to do about this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants