From 73b51d2a7d24bf3f611d8c139108c59f0d2a9471 Mon Sep 17 00:00:00 2001 From: Will Mooreston Date: Fri, 24 Jul 2026 12:05:23 -0700 Subject: [PATCH] Bump nettyVersion to 4.2.16.Final Fixes CVE-2026-44891, CVE-2026-55831, CVE-2026-55833 flagged in TeamCity build LabKey_267Release_Premium_GitExtraPostgres/4106377. --- gradle.properties | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gradle.properties b/gradle.properties index 32b97435ee..870f4aea2b 100644 --- a/gradle.properties +++ b/gradle.properties @@ -260,8 +260,8 @@ microsoftGraphVersion=6.65.0 mssqlJdbcVersion=13.4.0.jre11 -# Netty - transitive dependency via azure-core-http-netty; force for CVE-2026-33871, CVE-2026-33870, plus CVE-2026-45674 and CVE-2026-47691 (and 20 related) fixed in 4.2.15.Final -nettyVersion=4.2.15.Final +# Netty - transitive dependency via azure-core-http-netty; force for CVE-2026-33871, CVE-2026-33870, CVE-2026-45674, CVE-2026-47691 (and 20 related) fixed in 4.2.15.Final, plus CVE-2026-44891, CVE-2026-55831, CVE-2026-55833 fixed in 4.2.16.Final +nettyVersion=4.2.16.Final # Reactor - transitive dependency via azure-core; force for version consistency across modules reactorCoreVersion=3.8.1