diff --git a/build-tools-internal/version.properties b/build-tools-internal/version.properties
index d3ca046adefd8..5b8d80f0cde77 100644
--- a/build-tools-internal/version.properties
+++ b/build-tools-internal/version.properties
@@ -14,7 +14,7 @@ log4j = 2.19.0
slf4j = 2.0.6
ecsLogging = 1.2.0
jna = 5.12.1
-netty = 4.1.115.Final
+netty = 4.1.118.Final
commons_lang3 = 3.9
google_oauth_client = 1.34.1
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index f21cbb812d608..7292be3d2c49e 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -1389,9 +1389,9 @@
-
-
-
+
+
+
@@ -1399,9 +1399,9 @@
-
-
-
+
+
+
@@ -1409,29 +1409,29 @@
-
-
-
+
+
+
-
-
-
+
+
+
-
-
-
+
+
+
-
-
-
+
+
+
-
-
-
+
+
+
@@ -1439,9 +1439,9 @@
-
-
-
+
+
+
@@ -1449,14 +1449,14 @@
-
-
-
+
+
+
-
-
-
+
+
+
@@ -1464,14 +1464,14 @@
-
-
-
+
+
+
-
-
-
+
+
+
@@ -1479,9 +1479,9 @@
-
-
-
+
+
+
@@ -1489,9 +1489,9 @@
-
-
-
+
+
+
diff --git a/modules/repository-azure/src/main/plugin-metadata/plugin-security.policy b/modules/repository-azure/src/main/plugin-metadata/plugin-security.policy
index 8a7c623597376..3aeeb6bde3914 100644
--- a/modules/repository-azure/src/main/plugin-metadata/plugin-security.policy
+++ b/modules/repository-azure/src/main/plugin-metadata/plugin-security.policy
@@ -12,6 +12,8 @@ grant {
permission java.net.SocketPermission "*", "connect";
// io.netty.util.concurrent.GlobalEventExecutor.startThread
permission java.lang.RuntimePermission "setContextClassLoader";
+ // io.netty.util.concurrent.GlobalEventExecutor.startThread
+ permission java.lang.RuntimePermission "getClassLoader";
// Used by jackson bean deserialization
permission java.lang.RuntimePermission "accessDeclaredMembers";
permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
diff --git a/modules/transport-netty4/src/main/plugin-metadata/plugin-security.policy b/modules/transport-netty4/src/main/plugin-metadata/plugin-security.policy
index ed278af96d926..dbf8e728c1606 100644
--- a/modules/transport-netty4/src/main/plugin-metadata/plugin-security.policy
+++ b/modules/transport-netty4/src/main/plugin-metadata/plugin-security.policy
@@ -14,8 +14,9 @@ grant codeBase "${codebase.netty-common}" {
// netty makes and accepts socket connections
permission java.net.SocketPermission "*", "accept,connect";
- // Netty sets custom classloader for some of its internal threads
+ // Netty gets and sets classloaders for some of its internal threads
permission java.lang.RuntimePermission "setContextClassLoader";
+ permission java.lang.RuntimePermission "getClassLoader";
};
grant codeBase "${codebase.netty-transport}" {
diff --git a/server/src/main/resources/org/elasticsearch/bootstrap/test-framework.policy b/server/src/main/resources/org/elasticsearch/bootstrap/test-framework.policy
index c122d26fb7f2f..e5d4e05c4b641 100644
--- a/server/src/main/resources/org/elasticsearch/bootstrap/test-framework.policy
+++ b/server/src/main/resources/org/elasticsearch/bootstrap/test-framework.policy
@@ -119,8 +119,9 @@ grant codeBase "${codebase.httpasyncclient}" {
grant codeBase "${codebase.netty-common}" {
// for reading the system-wide configuration for the backlog of established sockets
permission java.io.FilePermission "/proc/sys/net/core/somaxconn", "read";
- // Netty sets custom classloader for some of its internal threads
+ // Netty gets and sets classloaders for some of its internal threads
permission java.lang.RuntimePermission "setContextClassLoader";
+ permission java.lang.RuntimePermission "getClassLoader";
permission java.net.SocketPermission "*", "accept,connect";
};
diff --git a/x-pack/plugin/security/src/main/plugin-metadata/plugin-security.policy b/x-pack/plugin/security/src/main/plugin-metadata/plugin-security.policy
index d814dfbb1c117..b4791207a15bf 100644
--- a/x-pack/plugin/security/src/main/plugin-metadata/plugin-security.policy
+++ b/x-pack/plugin/security/src/main/plugin-metadata/plugin-security.policy
@@ -46,8 +46,9 @@ grant {
grant codeBase "${codebase.netty-common}" {
// for reading the system-wide configuration for the backlog of established sockets
permission java.io.FilePermission "/proc/sys/net/core/somaxconn", "read";
- // Netty sets custom classloader for some of its internal threads
+ // Netty gets and sets classloaders for some of its internal threads
permission java.lang.RuntimePermission "setContextClassLoader";
+ permission java.lang.RuntimePermission "getClassLoader";
};
grant codeBase "${codebase.netty-transport}" {