From 62ea12772b028133007835fe61e841e525006fe1 Mon Sep 17 00:00:00 2001
From: Kevin Cai <caixiaohua@starrocks.com>
Date: Sun, 7 Sep 2025 12:31:39 +0800
Subject: [PATCH] [BugFix][CVE-2025-58056] bump io.netty version to
 4.1.125.Final (#62801)

Signed-off-by: Kevin Cai <kevin.cai@celerdata.com>
---
 fe/build.gradle.kts                       | 2 +-
 fe/pom.xml                                | 2 +-
 fs_brokers/apache_hdfs_broker/src/pom.xml | 2 +-
 java-extensions/pom.xml                   | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/fe/build.gradle.kts b/fe/build.gradle.kts
index f719686dcfd..0708821642c 100644
--- a/fe/build.gradle.kts
+++ b/fe/build.gradle.kts
@@ -59,7 +59,7 @@ subprojects {
         set("hive-apache.version", "3.1.2-22")
         set("hudi.version", "1.0.2")
         set("iceberg.version", "1.9.0")
-        set("io.netty.version", "4.1.124.Final")
+        set("io.netty.version", "4.1.125.Final")
         set("jackson.version", "2.15.2")
         set("jetty.version", "9.4.57.v20241219")
         set("jprotobuf-starrocks.version", "1.0.0")
diff --git a/fe/pom.xml b/fe/pom.xml
index 05a0d997674..8ccc5744803 100644
--- a/fe/pom.xml
+++ b/fe/pom.xml
@@ -65,7 +65,7 @@ under the License.
         <kafka-clients.version>3.4.0</kafka-clients.version>
         <arrow.version>18.0.0</arrow.version>
         <grpc.version>1.63.0</grpc.version>
-        <io.netty.version>4.1.124.Final</io.netty.version>
+        <io.netty.version>4.1.125.Final</io.netty.version>
         <puppycrawl.version>10.21.1</puppycrawl.version>
         <aws-v2-sdk.version>2.29.52</aws-v2-sdk.version>
         <avro.version>1.12.0</avro.version>
diff --git a/fs_brokers/apache_hdfs_broker/src/pom.xml b/fs_brokers/apache_hdfs_broker/src/pom.xml
index a3f94e33767..79358560a10 100644
--- a/fs_brokers/apache_hdfs_broker/src/pom.xml
+++ b/fs_brokers/apache_hdfs_broker/src/pom.xml
@@ -50,7 +50,7 @@ under the License.
         <jackson.version>2.18.3</jackson.version>
         <avro.version>1.11.4</avro.version>
         <jetty.version>9.4.57.v20241219</jetty.version>
-        <io.netty.version>4.1.124.Final</io.netty.version>
+        <io.netty.version>4.1.125.Final</io.netty.version>
     </properties>
 
     <profiles>
diff --git a/java-extensions/pom.xml b/java-extensions/pom.xml
index 3d506ed2388..a31c296e613 100644
--- a/java-extensions/pom.xml
+++ b/java-extensions/pom.xml
@@ -41,7 +41,7 @@
         <jni-connector.version>1.0.0</jni-connector.version>
         <hadoop-ext.version>1.0.0</hadoop-ext.version>
         <java-utils.version>1.0.0</java-utils.version>
-        <io.netty.version>4.1.124.Final</io.netty.version>
+        <io.netty.version>4.1.125.Final</io.netty.version>
         <protobuf-java.version>3.25.5</protobuf-java.version>
         <nimbusds.version>9.37.2</nimbusds.version>
         <commons-io.version>2.14.0</commons-io.version>