#648

[Snyk] Upgrade io.netty:netty-handler from 4.2.15.Final to 4.2.17.Final

Opensvivesaerowants to merge intofrom

Snyk has created this PR to upgrade io.netty:netty-handler from 4.2.15.Final to 4.2.17.Final.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 2 versions ahead of your current version.

  • The recommended version was released 21 days ago.

Issues fixed by the recommended upgrade:

IssueScoreExploit Maturity
Improper Check for Unusual or Exceptional Conditions
SNYK-JAVA-IONETTY-19005879
500No Known Exploit
Improper Validation of Certificate with Host Mismatch
SNYK-JAVA-IONETTY-19233599
500No Known Exploit

Breaking Change Risk

Notice: This assessment is enhanced by AI.


IMPORTANT

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Activity

188
svivesaero2mo ago

This is a patch-level upgrade that includes two versions, 4.2.16.Final and 4.2.17.Final. Both are explicitly labeled as bug-fix and security releases by the maintainers.

  • 4.2.16.Final: A security and bug-fix release addressing multiple CVEs related to memory exhaustion and request handling.
  • 4.2.17.Final: Another security and bug-fix release that resolves issues including potential SNI bypass and improper hostname verification in netty-handler.

No breaking API changes are documented in the release notes for this version range. The upgrade is recommended to incorporate the security patches.

Source: Netty Release Announcements

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.