Skip to content

Update Netty to 4.1.137 - #7245

Merged
bhoradc merged 2 commits into
masterfrom
bhoradc/upgrade-netty-4.1.137
Aug 10, 2026
Merged

Update Netty to 4.1.137#7245
bhoradc merged 2 commits into
masterfrom
bhoradc/upgrade-netty-4.1.137

Conversation

@bhoradc

@bhoradc bhoradc commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Motivation and Context

Netty 4.1.137 fixes CVE-2026-59903 in netty-codec-http. See Netty advisory.

Fixes #7242

Modifications

  • netty.version: 4.1.136.Final → 4.1.137.Final
  • netty-open-ssl-version: 2.0.78.Final → 2.0.81.Final (matches Netty 4.1.137's canonical tcnative pin)

Testing

Relying on PR build for unit tests. No breaking changes identified in the 4.1.136 → 4.1.137 diff.

Types of changes

  • New feature (non-breaking change which adds functionality)

Checklist

  • I have read the CONTRIBUTING document
  • I have added a changelog entry.

License

  • I confirm that this pull request can be released under the Apache 2 license

Addresses CVE-2026-59903. Fixes #7242
@bhoradc
bhoradc requested a review from a team as a code owner August 10, 2026 17:44
@bhoradc
bhoradc requested a review from S-Saranya1 August 10, 2026 17:49
@bhoradc bhoradc added the no-api-surface-area-change Indicate there is no API surface area change and thus API surface area review is not required label Aug 10, 2026
@bhoradc
bhoradc enabled auto-merge August 10, 2026 17:59
@bhoradc
bhoradc disabled auto-merge August 10, 2026 20:32
@bhoradc
bhoradc added this pull request to the merge queue Aug 10, 2026
Merged via the queue into master with commit 6addb9f Aug 10, 2026
13 checks passed
@github-actions

Copy link
Copy Markdown

This pull request has been closed and the conversation has been locked. Comments on closed PRs are hard for our team to see. If you need more assistance, please open a new issue that references this one.

@github-actions github-actions Bot locked as resolved and limited conversation to collaborators Aug 10, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

no-api-surface-area-change Indicate there is no API surface area change and thus API surface area review is not required

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Upgrade Netty library to 4.1.137.Final (CVE-2026-59903)

2 participants