Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[UNDERTOW-2207][UNDERTOW-2212][UNDERTOW-2239][UNDERTOW-2252] 2.2.x backport bug fixes #1457

Merged
merged 5 commits into from
Mar 30, 2023
Merged

[UNDERTOW-2207][UNDERTOW-2212][UNDERTOW-2239][UNDERTOW-2252] 2.2.x backport bug fixes #1457

merged 5 commits into from
Mar 30, 2023

Conversation

fl4via
Copy link
Member

@fl4via fl4via commented Mar 26, 2023

@fl4via fl4via added waiting CI check Ready to be merged but waiting for CI check maintenance branch Targeting maintainance branch labels Mar 26, 2023
carterkozak and others added 5 commits March 26, 2023 13:01
@carterkozak @fl4via
UNDERTOW-2207: UndertowOutputStream allows flush after writes
fdaaa3b 
Previously, setting Content-Length would auto-close the stream
in such a way that a flush after the final write would throw
an IOException due to internal self-closure.
@rmartinc @fl4via
[UNDERTOW-2212] CVE-2022-4492 Server identity in https connection is …
a4d3b16 
…not checked by the undertow client

Signed-off-by: Flavia Rainone <frainone@redhat.com>
@fl4via
[UNDERTOW-2212] At the HttpClientTestCase.testSslServerIdentity test,…
a511cb5 
… do not enforce the exception to be of type ClosedChannelException (see UNDERTOW-2249).

Signed-off-by: Flavia Rainone <frainone@redhat.com>
@fl4via
[UNDERTOW-2239] CVE-2023-1108 At SslConduit.wrapAndFlip, do not attem…
1302c8c 
…pt to wrap if engine.isInboundDone()

Signed-off-by: Flavia Rainone <frainone@redhat.com>
@fl4via
[UNDERTOW-2252] Potential fix for the SslConduit.dataToUnwrap buffer …
f0a0f24 
…leak

Signed-off-by: Flavia Rainone <frainone@redhat.com>
@linkdonghh
Copy link

Hi @fl4via
Many thanks for the fixing. Eagerly waiting for the merge. May you share the release plan for 2.2.x?

@fl4via
Copy link
Member Author

fl4via commented Mar 28, 2023

@linkdonghh for 2.2.24.Final we will just close these Jiras and do a release right away. I'll get you an updated info on the next 2.2.25.Final release in a bit, hold on and I'll get back to you with the link.

@fl4via fl4via force-pushed the 2.2.x_backport_bug_fixes branch 6 times, most recently from 2d6dddc to f0a0f24 Compare March 30, 2023 13:08
@fl4via fl4via removed the waiting CI check Ready to be merged but waiting for CI check label Mar 30, 2023
@fl4via fl4via merged commit d8f06aa into undertow-io:2.2.x Mar 30, 2023
19 checks passed
@fl4via fl4via deleted the 2.2.x_backport_bug_fixes branch March 30, 2023 14:15
@fl4via
Copy link
Member Author

fl4via commented Apr 4, 2023

@linkdonghh Sorry for the delay in getting back to you, I was away during part of last week.
The next 2.2.25.Final release is planned for this week and it will include the fixes in these PRs:
#1443
#1449
#1385
#1445
Then, we will proceed merging the pendings PRs and backporting all fixes after that one. In a nutshell, this is our roadmap. Once I update the Undertow's website (WIP), there will be a link there to updated roadmaps in Jira so you can always keep an eye for what's coming.

@mareknovotny mareknovotny mentioned this pull request Apr 4, 2023
Closed
@carterkozak carterkozak mentioned this pull request Apr 11, 2023
Merged
@Ginxo
Copy link

Ginxo commented Apr 12, 2023

@fl4via Hi, any news on this? is there a way we can help with 2.2.25.Final release?
Thanks in advance

@fawind fawind mentioned this pull request Apr 13, 2023
Merged
This was referenced Sep 18, 2023
Merged
Merged
This was referenced Sep 20, 2023
Closed
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
maintenance branch Targeting maintainance branch
Projects
None yet
Milestone
No milestone
5 participants
@fl4via @linkdonghh @Ginxo @carterkozak @rmartinc