[Feature]Linkis] Security Work Order - Network Communication Library Dependency Version Upgrade

Open
#5,314 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Feature
Clarity
Mostly clear
Activity status
Stale
Tech stack
java
Domain
backend, security

Research direction

No files or tests are named. Start by locating the dependency declarations for netty.version and jetty.version, then review the affected usages and current compatibility constraints. Update both versions and run the project's existing test suite to verify dependency compatibility and stability.

Written by the indexing model from the issue text.

Description

feature
Search before asking
  • I had searched in the https://github.com/apache/linkis/issues and found no similar feature requirement.
Problem Description

Linkis使用的网络通信库版本存在安全漏洞，需要升级Netty和Jetty到安全版本。

Description
  1. netty.version: 从4.1.86.Final升级到4.2.7.Final，修复已知安全漏洞
  2. jetty.version: 从9.4.56.v20240826升级到9.4.57.v20241219，修复已知安全漏洞
  3. 确保升级后的依赖与现有代码兼容
Use case

确保Linkis系统在生产环境中的安全性，修复已知的网络通信库漏洞。

Solutions
  1. 升级netty.version到4.2.7.Final
  2. 升级jetty.version到9.4.57.v20241219
  3. 验证所有依赖升级后的兼容性和稳定性
  4. 进行全面的测试验证
Anything else

none

Are you willing to submit a PR?
  • Yes I am willing to submit a PR!
Dominant language
Java
Stars
3.4k
Forks
1.2k
No merged PRs in 30d

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from apache/linkis

All issues in apache/linkis

Similar issues

More Java issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.