Update netty to 4.1.115.Final for kafka and nsq collectors to patch C…

…VE-2024-47535 (#163)
opensnowcat · Nov 27, 2024 · 50a5dab · 50a5dab
1 parent 6e87ddd
commit 50a5dab
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 2 deletions.
diff --git a/build.sbt b/build.sbt
@@ -207,7 +207,11 @@ lazy val kafkaSettings =
   allSettings ++ buildInfoSettings ++ Seq(
     moduleName := "opensnowcat-collector-kafka",
     Docker / packageName := "scala-stream-collector-kafka",
-    libraryDependencies ++= Seq(Dependencies.Libraries.kafkaClients, Dependencies.Libraries.mskAuth)
+    libraryDependencies ++= Seq(
+      Dependencies.Libraries.kafkaClients,
+      Dependencies.Libraries.mskAuth,
+      Dependencies.Libraries.nettyAll
+    )
   )
 
 lazy val kafka = project
@@ -230,7 +234,8 @@ lazy val nsqSettings =
       Dependencies.Libraries.nsqClient,
       Dependencies.Libraries.jackson,
       Dependencies.Libraries.log4j,
-      Dependencies.Libraries.guava
+      Dependencies.Libraries.guava,
+      Dependencies.Libraries.nettyAll
     )
   )
 

diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -39,6 +39,7 @@ object Dependencies {
     val jnrUnixsock = "0.38.22"
     val protobuf    = "3.25.5"
     val guava       = "32.1.3-jre"
+    val nettyAll    = "4.1.115.Final"
 
     // Scala
     val collectorPayload = "0.0.0"
@@ -82,6 +83,7 @@ object Dependencies {
     val rabbitMQ       = "com.rabbitmq"             % "amqp-client"      % V.rabbitMQ
     val protobuf       = "com.google.protobuf"      % "protobuf-java"    % V.protobuf
     val guava          = "com.google.guava"         % "guava"            % V.guava
+    val nettyAll       = "io.netty"                 % "netty-all"        % V.nettyAll
 
     // Scala
     val collectorPayload = "com.snowplowanalytics"  % "collector-payload-1"               % V.collectorPayload