[STORM-4078] Uplift Netty version to 4.1.112

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.6.4
• Component/s: storm-client, storm-server
• Labels: dependency-upgrade
• Assignee: Unassigned
• Reporter: Andrew Olson
• Created: 23/Aug/24 17:22
• Updated: 23/Aug/24 20:48
• Resolved: 23/Aug/24 20:48

Description

Netty version 4.1.107.Final is shaded into storm-shaded-deps (with classes relocated to org/apache/storm/shade/io/netty). It now needs to be uplifted to remediate CVE-2024-29025. The latest available 4.x release for Netty is 4.1.112.Final.