Bump netty version to 4.1.75.Final, grpc to 1.45.1

apache · Apr 1, 2022 · 70cdfb8 · 70cdfb8
1 parent dc44b4e
commit 70cdfb8
Show file tree

Hide file tree

Showing 7 changed files with 59 additions and 0 deletions.
diff --git a/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-all.bin.txt
@@ -229,6 +229,11 @@ Apache Software License, Version 2.
 - lib/io.netty-netty-resolver-4.1.75.Final.jar [11]
 - lib/io.netty-netty-resolver-dns-4.1.75.Final.jar [11]
 - lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-windows-x86_64.jar [11]
 - lib/io.netty-netty-tcnative-classes-2.0.50.Final.jar [11]
 - lib/io.netty-netty-transport-4.1.75.Final.jar [11]
 - lib/io.netty-netty-transport-classes-epoll-4.1.75.Final.jar [11]

diff --git a/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-bkctl.bin.txt
@@ -227,6 +227,11 @@ Apache Software License, Version 2.
 - lib/io.netty-netty-handler-proxy-4.1.75.Final.jar [11]
 - lib/io.netty-netty-resolver-4.1.75.Final.jar [11]
 - lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-windows-x86_64.jar [11]
 - lib/io.netty-netty-tcnative-classes-2.0.50.Final.jar [11]
 - lib/io.netty-netty-transport-4.1.75.Final.jar [11]
 - lib/io.netty-netty-transport-classes-epoll-4.1.75.Final.jar [11]

diff --git a/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt b/bookkeeper-dist/src/main/resources/LICENSE-server.bin.txt
@@ -229,6 +229,11 @@ Apache Software License, Version 2.
 - lib/io.netty-netty-resolver-4.1.75.Final.jar [11]
 - lib/io.netty-netty-resolver-dns-4.1.75.Final.jar [11]
 - lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-windows-x86_64.jar [11]
 - lib/io.netty-netty-tcnative-classes-2.0.50.Final.jar [11]
 - lib/io.netty-netty-transport-4.1.75.Final.jar [11]
 - lib/io.netty-netty-transport-classes-epoll-4.1.75.Final.jar [11]

diff --git a/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt b/bookkeeper-dist/src/main/resources/NOTICE-all.bin.txt
@@ -34,6 +34,11 @@ LongAdder), which was released with the following comments:
 - lib/io.netty-netty-resolver-4.1.75.Final.jar
 - lib/io.netty-netty-resolver-dns-4.1.75.Final.jar
 - lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-windows-x86_64.jar [11]
 - lib/io.netty-netty-tcnative-classes-2.0.50.Final.jar
 - lib/io.netty-netty-transport-4.1.75.Final.jar
 - lib/io.netty-netty-transport-classes-epoll-4.1.75.Final.jar

diff --git a/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt b/bookkeeper-dist/src/main/resources/NOTICE-bkctl.bin.txt
@@ -15,6 +15,11 @@ The Apache Software Foundation (http://www.apache.org/).
 - lib/io.netty-netty-handler-proxy-4.1.75.Final.jar
 - lib/io.netty-netty-resolver-4.1.75.Final.jar
 - lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-windows-x86_64.jar [11]
 - lib/io.netty-netty-tcnative-classes-2.0.50.Final.jar
 - lib/io.netty-netty-transport-4.1.75.Final.jar
 - lib/io.netty-netty-transport-classes-epoll-4.1.75.Final.jar

diff --git a/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt b/bookkeeper-dist/src/main/resources/NOTICE-server.bin.txt
@@ -17,6 +17,11 @@ The Apache Software Foundation (http://www.apache.org/).
 - lib/io.netty-netty-resolver-4.1.75.Final.jar
 - lib/io.netty-netty-resolver-dns-4.1.75.Final.jar
 - lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final.jar
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-linux-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-aarch_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-osx-x86_64.jar [11]
+- lib/io.netty-netty-tcnative-boringssl-static-2.0.50.Final-windows-x86_64.jar [11]
 - lib/io.netty-netty-tcnative-classes-2.0.50.Final.jar
 - lib/io.netty-netty-transport-4.1.75.Final.jar
 - lib/io.netty-netty-transport-classes-epoll-4.1.75.Final.jar

diff --git a/src/owasp-dependency-check-suppressions.xml b/src/owasp-dependency-check-suppressions.xml
@@ -173,5 +173,34 @@
     <sha1>6560f966bcf1aa78d27bcfa75fb6c4463a72c6c5</sha1>
     <cve>CVE-2021-34429</cve>
   </suppress>
+<!--    Netty false positive https://github.com/netty/netty-tcnative/issues/710 -->
+    <suppress>
+        <notes><![CDATA[
+   file name: netty-tcnative-boringssl-static-2.0.50.Final-osx-x86_64.jar
+   ]]></notes>
+        <sha1>ffc6648b33707f51dc64f2466d6f98a4f6a9ffd7</sha1>
+        <cve>CVE-2015-1346</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+   file name: netty-tcnative-boringssl-static-2.0.50.Final-osx-x86_64.jar
+   ]]></notes>
+        <sha1>ffc6648b33707f51dc64f2466d6f98a4f6a9ffd7</sha1>
+        <cve>CVE-2011-1797</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+   file name: netty-tcnative-boringssl-static-2.0.50.Final-osx-x86_64.jar
+   ]]></notes>
+        <sha1>ffc6648b33707f51dc64f2466d6f98a4f6a9ffd7</sha1>
+        <cve>CVE-2017-7000</cve>
+    </suppress>
+    <suppress>
+        <notes><![CDATA[
+   file name: netty-tcnative-boringssl-static-2.0.50.Final-osx-x86_64.jar
+   ]]></notes>
+        <sha1>ffc6648b33707f51dc64f2466d6f98a4f6a9ffd7</sha1>
+        <cve>CVE-2015-1205</cve>
+    </suppress>
 </suppressions>