From b39d7fa812af3beefeccf9046a71fa4120894a35 Mon Sep 17 00:00:00 2001
From: AnuGayan <anushaj@wso2.com>
Date: Tue, 26 Mar 2024 22:59:34 +0530
Subject: [PATCH 1/2] Bump netty version to 4.1.108.Final to fix CVE-2024-29025

---
 pom.xml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pom.xml b/pom.xml
index c918437502..e29a54ce06 100644
--- a/pom.xml
+++ b/pom.xml
@@ -2504,7 +2504,7 @@
         <carbon.rule.version>4.5.6</carbon.rule.version>
         <carbon.rule.imp.pkg.version>[4.5.0, 4.6.0)</carbon.rule.imp.pkg.version>
         <!-- Synapse Version -->
-        <synapse.version>4.0.0-wso2v99</synapse.version>
+        <synapse.version>4.0.0-wso2v101</synapse.version>
         <carbon.identity.entitlement.proxy.version>5.4.4</carbon.identity.entitlement.proxy.version>
         <carbon.identity.entitlement.proxy.imp.pkg.version>[5.2.0, 6.0.0)
         </carbon.identity.entitlement.proxy.imp.pkg.version>
@@ -2604,8 +2604,8 @@
         <saxon.wso2.version>8.9.0.wso2v2</saxon.wso2.version>
         <json.smart.version>2.5.0</json.smart.version>
         <damnhandy.version>2.1.6.wso2v2</damnhandy.version>
-        <netty.version>4.1.104.Final</netty.version>
-        <netty.tcnative.version>2.0.47.Final</netty.tcnative.version>
+        <netty.version>4.1.108.Final</netty.version>
+        <netty.tcnative.version>2.0.65.Final</netty.tcnative.version>
         <javax.activation.version>0.0</javax.activation.version>
         <javax.servlet.imp.pkg.version>[2.4.0, 3.0.0)</javax.servlet.imp.pkg.version>
         <javax.servlet.http.imp.pkg.version>[2.4.0, 3.0.0)</javax.servlet.http.imp.pkg.version>

From e0d4ba1045055f7c8a32274cd5e17dbb862c24bd Mon Sep 17 00:00:00 2001
From: Anusha Jayasundara <anushaj@wso2.com>
Date: Wed, 27 Mar 2024 11:51:34 +0530
Subject: [PATCH 2/2] Update synapse version

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index e29a54ce06..eb583af5ee 100644
--- a/pom.xml
+++ b/pom.xml
@@ -2504,7 +2504,7 @@
         <carbon.rule.version>4.5.6</carbon.rule.version>
         <carbon.rule.imp.pkg.version>[4.5.0, 4.6.0)</carbon.rule.imp.pkg.version>
         <!-- Synapse Version -->
-        <synapse.version>4.0.0-wso2v101</synapse.version>
+        <synapse.version>4.0.0-wso2v102</synapse.version>
         <carbon.identity.entitlement.proxy.version>5.4.4</carbon.identity.entitlement.proxy.version>
         <carbon.identity.entitlement.proxy.imp.pkg.version>[5.2.0, 6.0.0)
         </carbon.identity.entitlement.proxy.imp.pkg.version>