From 1be56d4e8135e0a1775e6f91f4039855eaa5e148 Mon Sep 17 00:00:00 2001
From: Erik Merkle <github@emerkle.net>
Date: Tue, 11 Nov 2025 11:48:58 -0600
Subject: [PATCH] CNDB-16024: HCD-205: Upgrade Netty to 4.1.128.Final (#2063)

This patch upgrades Netty to address CVEs:
CVE-2025-55163
CVE-2025-58056
CVE-2025-58057
CVE-2025-59419

A recent security scan of HCD 1.2.3 shows a vulnerable version of Netty.

This patch updates Netty to 4.1.128.Final to address  CVEs:
CVE-2025-55163
CVE-2025-58056
CVE-2025-58057
CVE-2025-59419
---
 .build/parent-pom-template.xml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/.build/parent-pom-template.xml b/.build/parent-pom-template.xml
index d079b091690..010dbc14bbb 100644
--- a/.build/parent-pom-template.xml
+++ b/.build/parent-pom-template.xml
@@ -39,6 +39,7 @@
     <bytebuddy.version>1.14.17</bytebuddy.version>
     <byteman.version>4.0.23</byteman.version>
     <ohc.version>0.5.1</ohc.version>
+    <netty.version>4.1.128.Final</netty.version>
 
     <!-- These are referenced in build.xml, so need to be propagated from there -->
     <asm.version>@asm.version@</asm.version>
@@ -733,7 +734,7 @@
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-all</artifactId>
-        <version>4.1.119.Final</version>
+        <version>${netty.version}</version>
         <exclusions>
           <exclusion>
             <groupId>io.netty</groupId>
@@ -827,18 +828,18 @@
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-transport-native-epoll</artifactId>
-        <version>4.1.119.Final</version>
+        <version>${netty.version}</version>
       </dependency>
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-transport-native-epoll</artifactId>
-        <version>4.1.119.Final</version>
+        <version>${netty.version}</version>
         <classifier>linux-x86_64</classifier>
       </dependency>
       <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-transport-native-epoll</artifactId>
-        <version>4.1.119.Final</version>
+        <version>${netty.version}</version>
         <classifier>linux-aarch_64</classifier>
       </dependency>