Vert.x 4.5.7 fixing netty-codec-http form POST OOM CVE-2024-29025

Description

Upgrade Vertx from 4.5.4 to 4.5.7. This indirectly upgrades Netty from 4.1.107.Final to 4.1.108.Final fixing netty-codec-http form POST OOM:

https://github.com/netty/netty/security/advisories/GHSA-5jpm-x58v-624v
https://www.cve.org/CVERecord?id=CVE-2024-29025

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Checklist

hide

Activity

Show:

Julian Ladisch June 5, 2024 at 5:03 PM

Denis May 31, 2024 at 7:58 AM

Hello
could you please rest/verify the changes on Q Bugfest? The edge-rtac 2.7.2 was deployed by Kitfox. Thank you
cc

Done

Details

Assignee

Reporter

Tester Assignee

Priority

Development Team

Dreamliner

Fix versions

Release

Quesnelia (R1 2024) Bug Fix

RCA Group

Related dependency upgrade

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created May 25, 2024 at 1:47 PM
Updated June 13, 2024 at 6:34 PM
Resolved May 27, 2024 at 8:37 AM
TestRail: Cases
TestRail: Runs

Flag notifications