Skip to content

CVE-2019-20444 fix#2

Merged
vivek807 merged 5 commits intodeep/release/3.10/netty-3.10.6.Final-patch2from
deep/3.10/feature/CVE-2019-20444
Oct 3, 2024
Merged

CVE-2019-20444 fix#2
vivek807 merged 5 commits intodeep/release/3.10/netty-3.10.6.Final-patch2from
deep/3.10/feature/CVE-2019-20444

Conversation

@vivek807
Copy link
Copy Markdown
Collaborator

@vivek807 vivek807 commented Sep 27, 2024

DEEP-462: Backported the PR

normanmaurer and others added 4 commits June 29, 2016 14:41
Motivation:

In JDK9 the Cleaner.clean method cannot be called as it is not exported
from `java.base`. `Runnable.run` should be called instead.

Modifications:
Pick Runnable.run if the cleaner implements Runnable. Otherwise try the
clean method on the class implementing the cleaner.

Result:
The cleaner for direct byte buffers is run on JDK9 as well as earlier
JDKs.
…E header (#1)

VISA-11: Backported the PR netty#9585

Add fix for http request smuggling, cause by obfuscating TE header.
@vivek807 vivek807 requested a review from cmick September 27, 2024 04:28
@vivek807 vivek807 changed the title DEEP-462: Backported the [PR](https://github.com/netty/netty/pull/9871) deep/3.10/feature/CVE-2019-20444 Sep 28, 2024
@vivek807 vivek807 changed the title deep/3.10/feature/CVE-2019-20444 CVE-2019-20444 fix Sep 28, 2024
@vivek807 vivek807 requested a review from nozjkoitop September 28, 2024 05:09
Copy link
Copy Markdown

@nozjkoitop nozjkoitop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@vivek807 vivek807 changed the base branch from 3.10 to deep/release/3.10/netty-3.10.6.Final-patch2 September 30, 2024 15:37
@vivek807 vivek807 merged commit fa42adb into deep/release/3.10/netty-3.10.6.Final-patch2 Oct 3, 2024
@vivek807 vivek807 deleted the deep/3.10/feature/CVE-2019-20444 branch October 3, 2024 03:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants