Skip to content

Commit 9ba0370

Browse files
pull[bot]spolti
andauthored
chore: Fix [CVE-2025-24970](GHSA-4g8c-wm8x-jfhw) SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine #### Motivation #### Modifications #### Result Signed-off-by: Spolti <[email protected]> Co-authored-by: Filippe Spolti <[email protected]>
1 parent 09d5fbc commit 9ba0370

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

pom.xml

+6-2
Original file line numberDiff line numberDiff line change
@@ -57,8 +57,8 @@
5757
<!--suppress UnresolvedMavenProperty -->
5858
<jenkins-build-tag>${env.BUILD_TAG}</jenkins-build-tag> <!-- set by jenkins -->
5959

60-
<grpc-version>1.60.2</grpc-version>
61-
<netty-version>4.1.108.Final</netty-version>
60+
<grpc-version>1.63.2</grpc-version>
61+
<netty-version>4.1.118.Final</netty-version>
6262
<litelinks-version>1.7.2</litelinks-version>
6363
<kv-utils-version>0.5.1</kv-utils-version>
6464
<etcd-java-version>0.0.24</etcd-java-version>
@@ -437,6 +437,10 @@
437437
<groupId>io.grpc</groupId>
438438
<artifactId>grpc-netty</artifactId>
439439
</dependency>
440+
<dependency>
441+
<groupId>io.grpc</groupId>
442+
<artifactId>grpc-core</artifactId>
443+
</dependency>
440444

441445
<!-- This is required for compiling on java11+, to provide
442446
the @Generated annotation used in the protoc-generated

0 commit comments

Comments
 (0)