fix CVE-2022-41915 (#434)

This commit is contained in:
alan 2022-12-28 17:26:25 +08:00 committed by GitHub
parent a68b447878
commit 0d8f758bf0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 3 additions and 2 deletions

View File

@ -22,6 +22,7 @@ Release Notes.
* Fix In the higher version of mysql-connector-java 8x, there is an error in the value of db.instance.
* Add support for KafkaClients 3.x.
* Support to customize the collect period of JVM relative metrics.
* Upgrade netty-codec-http2 to 4.1.86.Final.
#### Documentation

View File

@ -220,7 +220,7 @@ The text of each license is the standard Apache 2.0 license.
Google: gson 2.8.9: https://github.com/google/gson , Apache 2.0
Google: proto-google-common-protos 2.0.1: https://github.com/googleapis/googleapis , Apache 2.0
Google: jsr305 3.0.2: http://central.maven.org/maven2/com/google/code/findbugs/jsr305/3.0.0/jsr305-3.0.0.pom , Apache 2.0
netty 4.1.79: https://github.com/netty/netty/blob/4.1/LICENSE.txt, Apache 2.0
netty 4.1.86: https://github.com/netty/netty/blob/4.1/LICENSE.txt, Apache 2.0
========================================================================
BSD licenses

View File

@ -88,7 +88,7 @@
<!-- core lib dependency -->
<bytebuddy.version>1.12.19</bytebuddy.version>
<grpc.version>1.50.0</grpc.version>
<netty.version>4.1.79.Final</netty.version>
<netty.version>4.1.86.Final</netty.version>
<gson.version>2.8.9</gson.version>
<os-maven-plugin.version>1.6.2</os-maven-plugin.version>
<protobuf-maven-plugin.version>0.6.1</protobuf-maven-plugin.version>