Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: 2.3.14.SP1, 2.3.15.Final, 2.2.33.SP1, 2.2.34.Final
Affects Version/s: None
Component/s: None
Labels:
None

Git Pull Request:
https://gitlab.cee.redhat.com/undertow-io/undertow/-/merge_requests/89, https://github.com/undertow-io/undertow/pull/1638, https://github.com/undertow-io/undertow/pull/1640, https://github.com/undertow-io/undertow/pull/1641

Bug in SSLConduit can prevent last chunk bytes from being written and also may cause some loops.
Requires JDK17 or newer.

Severity: High

causes

JBEAP-30615 [GSS](8.0.z) UNDERTOW-2588 - Undertow response can still break in case of Java 17 TLSv1.3 NewSessionTicket

Pull Request Sent

JBEAP-30616 [GSS](8.1.z) UNDERTOW-2588 - Undertow response can still break in case of Java 17 TLSv1.3 NewSessionTicket

Pull Request Sent

JBEAP-30617 [GSS](7.4.z) UNDERTOW-2588 - Undertow response can still break in case of Java 17 TLSv1.3 NewSessionTicket

Pull Request Sent

UNDERTOW-2588 Undertow response can still break in case of Java 17 TLSv1.3 NewSessionTicket

Pull Request Sent

is incorporated by

WFCORE-6900 CVE-2024-3653 CVE-2024-5971 Upgrade Undertow to 2.3.15.Final

Resolved

links to

Bug 2292211 - Red Hat Bugzilla

(2 links to)

Assignee:: Flavia Rainone

Reporter:: Flavia Rainone

Involved:: Alessio Soldano, Bartosz Baranowski, Brad Maxwell, Brian Stansberry, Carlo de Wolf, Chao Wang, Daniel Kreling, Darran Lofthouse, Farah Juma, Flavia Rainone, Ilia Vassilev, Ingo Weiss, Jason Lee, Lin Gao, Martin Stefanko (Inactive), Masafumi Miura, Michaela Osmerova, Miroslav Sochurek, Neil Wallace, Paramvir Jindal, Peter Mackay, Radovan Stancel, Richard Opalka, Stefano Maestri, Tom Jenkinson, Vladimir Dosoudil

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Created:: 2024/06/20 10:00 AM

Updated:: 2025/09/26 3:48 PM

Resolved:: 2024/06/20 11:03 AM