[Feature]Linkis] Security Work Order - Network Communication Library Dependency Version Upgrade
- Dominant language
- Java
- Stars
- 3.4k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
### Search before asking
- [x] I had searched in the `https://github.com/apache/linkis/issues` and found no similar feature requirement.
### Problem Description
Linkis使用的网络通信库版本存在安全漏洞,需要升级Netty和Jetty到安全版本。
### Description
1. netty.version: 从4.1.86.Final升级到4.2.7.Final,修复已知安全漏洞
2. jetty.version: 从9.4.56.v20240826升级到9.4.57.v20241219,修复已知安全漏洞
3. 确保升级后的依赖与现有代码兼容
### Use case
确保Linkis系统在生产环境中的安全性,修复已知的网络通信库漏洞。
### Solutions
1. 升级netty.version到4.2.7.Final
2. 升级jetty.version到9.4.57.v20241219
3. 验证所有依赖升级后的兼容性和稳定性
4. 进行全面的测试验证
### Anything else
none
### Are you willing to submit a PR?
- [x] Yes I am willing to submit a PR!
Contributor guide
Assessment
This issue has not been assessed yet.