Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
apacheGH-36209: [Java] Upgrade Netty due to security vulnerability (a…
…pache#36211) (#27) * apacheGH-36209: [Java] Upgrade Netty due to security vulnerability (apache#36211) Upgrading Netty dependency due to CVE GHSA-6mjq-h674-j845 This also requires a patch to arrow-memory Upgrading Netty, gRPC and Protobuf dependencies Existing tests No **This PR contains a "Critical Fix".** netty-handler SniHandler 16MB allocation The SniHandler can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the SniHandler to allocate 16MB of heap. GHSA-6mjq-h674-j845 * Closes: apache#36209 Authored-by: Bryan Cutler <cutlerb@gmail.com> Signed-off-by: David Li <li.davidm96@gmail.com> * Restore jackson version. --------- Signed-off-by: David Li <li.davidm96@gmail.com> Co-authored-by: Bryan Cutler <cutlerb@gmail.com>
- Loading branch information