[MINOR] Upgrade netty and grpc (#6100)

* Upgrade netty and grpc
* fix verification file
Signed-off-by: Simon Dudley <simon.dudley@consensys.net>

---------

Signed-off-by: Sally MacFarlane <macfarla.github@gmail.com>
Co-authored-by: Sally MacFarlane <macfarla.github@gmail.com>
pull/6087/head
Simon Dudley 1 year ago committed by GitHub
parent 67ef9e05f9
commit accac1ccbc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 5
      CHANGELOG.md
  2. 885
      gradle/verification-metadata.xml
  3. 12
      gradle/versions.gradle

@ -22,6 +22,11 @@
### Bug fixes
- Upgrade netty to address CVE-2023-44487, CVE-2023-34462 [#6100](https://github.com/hyperledger/besu/pull/6100)
- Upgrade grpc to address CVE-2023-32731, CVE-2023-33953, CVE-2023-44487, CVE-2023-4785 [#6100](https://github.com/hyperledger/besu/pull/6100)
---
### Download Links
## 23.10.1

File diff suppressed because it is too large Load Diff

@ -67,7 +67,7 @@ dependencyManagement {
entry 'picocli-codegen'
}
dependencySet(group: 'io.grpc', version: '1.53.0') {
dependencySet(group: 'io.grpc', version: '1.59.0') {
entry 'grpc-all'
entry 'grpc-core'
entry 'grpc-netty'
@ -76,11 +76,11 @@ dependencyManagement {
dependency 'io.kubernetes:client-java:18.0.0'
dependency 'io.netty:netty-all:4.1.90.Final'
dependency 'io.netty:netty-tcnative-boringssl-static:2.0.59.Final'
dependency group: 'io.netty', name: 'netty-transport-native-epoll', version:'4.1.90.Final', classifier: 'linux-x86_64'
dependency group: 'io.netty', name: 'netty-transport-native-kqueue', version:'4.1.90.Final', classifier: 'osx-x86_64'
dependency 'io.netty:netty-transport-native-unix-common:4.1.90.Final'
dependency 'io.netty:netty-all:4.1.100.Final'
dependency 'io.netty:netty-tcnative-boringssl-static:2.0.62.Final'
dependency group: 'io.netty', name: 'netty-transport-native-epoll', version:'4.1.100.Final', classifier: 'linux-x86_64'
dependency group: 'io.netty', name: 'netty-transport-native-kqueue', version:'4.1.100.Final', classifier: 'osx-x86_64'
dependency 'io.netty:netty-transport-native-unix-common:4.1.100.Final'
dependency 'io.opentelemetry:opentelemetry-api:1.24.0'
dependency 'io.opentelemetry:opentelemetry-exporter-otlp:1.24.0'

Loading…
Cancel
Save