Skip to content

[Feature]Linkis] Security Work Order - Network Communication Library Dependency Version Upgrade #5314

Open
Open
[Feature]Linkis] Security Work Order - Network Communication Library Dependency Version Upgrade#5314
Labels
feature

Description

@v-kkhuang
v-kkhuang
opened on Dec 4, 2025

Search before asking

  • I had searched in the https://github.com/apache/linkis/issues and found no similar feature requirement.

Problem Description

Linkis使用的网络通信库版本存在安全漏洞，需要升级Netty和Jetty到安全版本。

Description

  1. netty.version: 从4.1.86.Final升级到4.2.7.Final，修复已知安全漏洞
  2. jetty.version: 从9.4.56.v20240826升级到9.4.57.v20241219，修复已知安全漏洞
  3. 确保升级后的依赖与现有代码兼容

Use case

确保Linkis系统在生产环境中的安全性，修复已知的网络通信库漏洞。

Solutions

  1. 升级netty.version到4.2.7.Final
  2. 升级jetty.version到9.4.57.v20241219
  3. 验证所有依赖升级后的兼容性和稳定性
  4. 进行全面的测试验证

Anything else

none

Are you willing to submit a PR?

  • Yes I am willing to submit a PR!

Activity

  1. v-kkhuang
    added
    feature
    on Dec 4, 2025

  2. github-actions commented on Dec 4, 2025

    @github-actions
    github-actionsbot
    on Dec 4, 2025 – with GitHub Actions

    😊 Welcome to the Apache Linkis community!!

    We are glad that you are contributing by opening this issue.

    Please make sure to include all the relevant context.
    We will be here shortly.

    If you are interested in contributing to our website project, please let us know!
    You can check out our contributing guide on
    👉 How to Participate in Project Contribution.

    Community

    WeChat Assistant WeChat Public Account

    Mailing Lists

    Name Description Subscribe Unsubscribe Archive
    dev@linkis.apache.org community activity information subscribe unsubscribe archive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    feature

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions