Skip to content

CVE 2019 20445 fix#4

Merged
vivek807 merged 7 commits intodeep/release/3.10/netty-3.10.6.Final-patch2from
deep/3.10/feature/CVE-2019-20445
Oct 3, 2024
Merged

CVE 2019 20445 fix#4
vivek807 merged 7 commits intodeep/release/3.10/netty-3.10.6.Final-patch2from
deep/3.10/feature/CVE-2019-20445

Conversation

@vivek807
Copy link
Copy Markdown
Collaborator

[DEEP-462: Backported the PR](e2fcd6d)

normanmaurer and others added 6 commits June 29, 2016 14:41
Motivation:

In JDK9 the Cleaner.clean method cannot be called as it is not exported
from `java.base`. `Runnable.run` should be called instead.

Modifications:
Pick Runnable.run if the cleaner implements Runnable. Otherwise try the
clean method on the class implementing the cleaner.

Result:
The cleaner for direct byte buffers is run on JDK9 as well as earlier
JDKs.
…E header (#1)

VISA-11: Backported the PR netty#9585

Add fix for http request smuggling, cause by obfuscating TE header.
@vivek807 vivek807 requested a review from cmick September 28, 2024 03:37
@vivek807 vivek807 changed the title Deep/3.10/feature/CVE 2019 20445 CVE 2019 20445 fix Sep 28, 2024
@vivek807 vivek807 requested a review from nozjkoitop September 28, 2024 05:09
Copy link
Copy Markdown

@nozjkoitop nozjkoitop left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@vivek807 vivek807 changed the base branch from 3.10 to deep/release/3.10/netty-3.10.6.Final-patch2 September 30, 2024 15:36
@vivek807 vivek807 merged commit b3338f9 into deep/release/3.10/netty-3.10.6.Final-patch2 Oct 3, 2024
@vivek807 vivek807 deleted the deep/3.10/feature/CVE-2019-20445 branch October 3, 2024 03:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants