change version for netty-codec

Issue-ID: CLI-246

Signed-off-by: jitendra sharma <jitendra.sharma1@huawei.com>
Change-Id: If16e3c225639d50c7b059abd04af41af4f08b48c

diff --git a/grpc/pom.xml b/grpc/pom.xml
index 6ad4a47..dbef4b0 100644 (file)
--- a/grpc/pom.xml
+++ b/grpc/pom.xml
@@ -35,7 +35,7 @@
   </properties>
   <dependencies>
 <!-- netty-codec-http2 excluded due to Security Issues:- CVE-2019-9512,CVE-2019-9514,CVE-2019-9515,CVE-2019-9518,CVE-2019-16869
- and added invulnerable netty-codec-http2 4.1.42.Final -->
+ and added invulnerable netty-codec-http2 4.1.46.Final -->
     <dependency>
       <groupId>io.grpc</groupId>
       <artifactId>grpc-netty</artifactId>
@@ -47,21 +47,13 @@
             </exclusion>
       </exclusions>
     </dependency>
-      <!-- excluded netty-codec-http and added invulnerable version -->
+
     <dependency>
         <groupId>io.netty</groupId>
         <artifactId>netty-codec-http2</artifactId>
-        <version>4.1.42.Final</version>
-        <exclusions><exclusion>
-            <groupId>io.netty</groupId>
-            <artifactId>netty-codec-http</artifactId>
-        </exclusion></exclusions>
+        <version>4.1.46.Final</version>
     </dependency>
-      <dependency>
-          <groupId>io.netty</groupId>
-          <artifactId>netty-codec-http</artifactId>
-          <version>4.1.45.Final</version>
-      </dependency>
+      
     <dependency>
       <groupId>io.grpc</groupId>
       <artifactId>grpc-protobuf</artifactId>

diff --git a/profiles/http/pom.xml b/profiles/http/pom.xml
index 3410b63..2c1b39a 100644 (file)
--- a/profiles/http/pom.xml
+++ b/profiles/http/pom.xml
@@ -115,7 +115,7 @@ Excluded commons-codec vulnerable version and added invulnerable version
       <dependency>
           <groupId>io.netty</groupId>
           <artifactId>netty-codec-http</artifactId>
-          <version>4.1.45.Final</version>
+          <version>4.1.46.Final</version>
       </dependency>
           <dependency>
             <groupId>junit</groupId>