Skip to content

Conversation

@mrdziuban
Copy link
Contributor

Motivation and Context

This resolves CVE-2025-58056.

Modifications

Upgrades Netty to 4.1.126.Final and netty-open-ssl-version to 2.0.73.Final.

Testing

Screenshots (if appropriate)

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)

Checklist

  • I have read the CONTRIBUTING document
  • Local run of mvn install succeeds
  • My code follows the code style of this project
  • My change requires a change to the Javadoc documentation
  • I have updated the Javadoc documentation accordingly
  • I have added tests to cover my changes
  • All new and existing tests passed
  • I have added a changelog entry. Adding a new entry must be accomplished by running the scripts/new-change script and following the instructions. Commit the new file created by the script in .changes/next-release with your changes.
  • My change is to implement 1.11 parity feature and I have updated LaunchChangelog

License

  • I confirm that this pull request can be released under the Apache 2 license

@mrdziuban mrdziuban requested a review from a team as a code owner September 4, 2025 20:06
@mrdziuban
Copy link
Contributor Author

@L-Applin would you mind taking a look (or tagging someone else we should)? Thanks in advance!

Copy link
Contributor

@zoewangg zoewangg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@alextwoods alextwoods enabled auto-merge September 4, 2025 20:15
@zoewangg
Copy link
Contributor

zoewangg commented Sep 4, 2025

Running tests now

@sonarqubecloud
Copy link

sonarqubecloud bot commented Sep 5, 2025

@zoewangg zoewangg added the no-api-surface-area-change Indicate there is no API surface area change and thus API surface area review is not required label Sep 5, 2025
@alextwoods alextwoods added this pull request to the merge queue Sep 5, 2025
Merged via the queue into aws:master with commit 97976b7 Sep 5, 2025
17 of 35 checks passed
ezhang6811 added a commit to aws-observability/aws-otel-java-instrumentation that referenced this pull request Sep 5, 2025
*Issue #, if available:*

*Description of changes:*
Fixes
[CVE-2025-58056](GHSA-fghv-69vj-qj49). See
upstream [PR](aws/aws-sdk-java-v2#6398).

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
majanjua-amzn pushed a commit to majanjua-amzn/aws-otel-java-instrumentation that referenced this pull request Sep 9, 2025
*Issue #, if available:*

*Description of changes:*
Fixes
[CVE-2025-58056](GHSA-fghv-69vj-qj49). See
upstream [PR](aws/aws-sdk-java-v2#6398).

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

no-api-surface-area-change Indicate there is no API surface area change and thus API surface area review is not required

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants