apache / apache/linkis

[Feature]Linkis] Security Work Order - Network Communication Library Dependency Version Upgrade

Open
#5,314 1 comment 0 reactions 0 assignees View on GitHub
feature
Dominant language
Java
Stars
3.4k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

### Search before asking


- [x] I had searched in the `https://github.com/apache/linkis/issues` and found no similar feature requirement.



### Problem Description


Linkis使用的网络通信库版本存在安全漏洞,需要升级Netty和Jetty到安全版本。

### Description


1. netty.version: 从4.1.86.Final升级到4.2.7.Final,修复已知安全漏洞
2. jetty.version: 从9.4.56.v20240826升级到9.4.57.v20241219,修复已知安全漏洞
3. 确保升级后的依赖与现有代码兼容

### Use case


确保Linkis系统在生产环境中的安全性,修复已知的网络通信库漏洞。

### Solutions


1. 升级netty.version到4.2.7.Final
2. 升级jetty.version到9.4.57.v20241219
3. 验证所有依赖升级后的兼容性和稳定性
4. 进行全面的测试验证

### Anything else


none

### Are you willing to submit a PR?


- [x] Yes I am willing to submit a PR!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.