Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade the version of netty #139

Closed
joshbressers opened this issue Jun 14, 2021 · 0 comments · Fixed by #140
Closed

Upgrade the version of netty #139

joshbressers opened this issue Jun 14, 2021 · 0 comments · Fixed by #140
Labels
bug

Comments

@joshbressers
Copy link

logstash-input-http currently builds with io.netty:netty-all version 4.1.49

The current version of netty at the time of writing is 4.1.63 and fixes a few security vulnerabilities. None of the issues are exploitable or directly affect logstash-input-http, but security scanners tag the findings which generates friction when having to explain the results
andsel added a commit to andsel/logstash-input-http that referenced this issue Jun 18, 2021
@andsel
Update Netty dependency to 4.1.65
270d08d 
Fixes logstash-plugins#139
@andsel andsel mentioned this issue Jun 18, 2021
Merged
andsel added a commit that referenced this issue Jun 18, 2021
@andsel
Update Netty dependency to 4.1.65 (#140)
0589e21 
Update Netty dependency to 4.1.65

Fixes #139
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Update Netty dependency to 4.1.65 andsel/logstash-input-http
1 participant
@joshbressers