Skip to content

CVE-2024-29025 fix#3

Merged
vivek807 merged 6 commits intodeep/release/3.10/netty-3.10.6.Final-patch2from
deep/3.10/feature/CVE-2024-29025
Oct 3, 2024
Merged

CVE-2024-29025 fix#3
vivek807 merged 6 commits intodeep/release/3.10/netty-3.10.6.Final-patch2from
deep/3.10/feature/CVE-2024-29025

Conversation

@vivek807
Copy link
Copy Markdown
Collaborator

@vivek807 vivek807 commented Sep 28, 2024

DEEP-462: Backported the commit

normanmaurer and others added 4 commits June 29, 2016 14:41
Motivation:

In JDK9 the Cleaner.clean method cannot be called as it is not exported
from `java.base`. `Runnable.run` should be called instead.

Modifications:
Pick Runnable.run if the cleaner implements Runnable. Otherwise try the
clean method on the class implementing the cleaner.

Result:
The cleaner for direct byte buffers is run on JDK9 as well as earlier
JDKs.
…E header (#1)

VISA-11: Backported the PR netty#9585

Add fix for http request smuggling, cause by obfuscating TE header.
@vivek807 vivek807 requested a review from cmick September 28, 2024 03:37
@vivek807 vivek807 changed the title DEEP-462: Backported the [commit](https://github.com/netty/netty/comimt/0d0c6ed782d13d423586ad0c71737b2c7d02058c) deep/3.10/feature/CVE-2024-29025 Sep 28, 2024
@vivek807 vivek807 changed the title deep/3.10/feature/CVE-2024-29025 CVE-2024-29025 fix Sep 28, 2024
@vivek807 vivek807 requested a review from nozjkoitop September 28, 2024 05:09
Copy link
Copy Markdown

@nozjkoitop nozjkoitop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@vivek807 vivek807 changed the base branch from 3.10 to deep/release/3.10/netty-3.10.6.Final-patch2 September 30, 2024 15:36
@vivek807 vivek807 merged commit 069e084 into deep/release/3.10/netty-3.10.6.Final-patch2 Oct 3, 2024
@vivek807 vivek807 deleted the deep/3.10/feature/CVE-2024-29025 branch October 3, 2024 03:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants