-
Component Upgrade
-
Resolution: Done
-
Blocker
-
None
-
None
-
None
Upgrade Undertow from 2.3.18.Final to 2.3.20.Final
Diff: https://github.com/undertow-io/undertow/compare/2.3.18.Final...2.3.20.Final
Release: https://issues.redhat.com/projects/UNDERTOW/versions/12468257
Full list of Jiras:
- 2.3.19.Final: https://issues.redhat.com/issues/?jql=project%20=%2012312521%20AND%20fixVersion%20=%2012432264%20ORDER%20BY%20priority%20DESC,%20key%20ASC
- 2.3.20.Final: https://issues.redhat.com/issues/?jql=project%20=%2012312521%20AND%20fixVersion%20=%2012468257%20ORDER%20BY%20priority%20DESC,%20key%20ASC
- duplicates
-
WFCORE-7375 Upgrade Undertow from 2.3.18.Final to 2.3.20.Final (resolves CVE-2024-4109, CVE-2025-9784)
-
- Resolved
-
- incorporates
-
UNDERTOW-2574 BufferLeak on AbstractFramedChannel.allocateReferenceCountedBuffer
-
- Closed
-
-
UNDERTOW-2608 Undertow Servlet 2.3.19 fails SecurityManager checks
-
- Closed
-
-
UNDERTOW-2235 Properly handle non servlet methods dispatched as error into container
-
- Closed
-
-
UNDERTOW-2340 RequestEncodingHandler does not update Content-Length after uncompressing
-
- Closed
-
-
UNDERTOW-2361 Deflate request body support (content-encoding in request) does not work as expected
-
- Closed
-
-
UNDERTOW-2511 CVE-2024-4109 undertow: information leakage via HTTP/2 request header reuse
-
- Closed
-
-
UNDERTOW-2519 ProxyHandler uses encoded query string
-
- Closed
-
-
UNDERTOW-2532 Websocket Session NPE
-
- Closed
-
-
UNDERTOW-2555 AJP Redirect with unescaped characters in URL is not encoded
-
- Closed
-
-
UNDERTOW-2565 HTTP2 sets exchange.queryString unencoded with allow unescaped characters in URL
-
- Closed
-
-
UNDERTOW-2566 HttpRequestParser.handleQueryParameters can set an encoded query string
-
- Closed
-
-
UNDERTOW-2567 Decoding of query strings with unescaped characters does not work in HTTP2 upgrade
-
- Closed
-
-
UNDERTOW-2573 MultiParseParserDefinition can overwrite entity size in exchange request
-
- Closed
-
-
WFLY-15829 JBWEB004248 causes empty reply
-
- Coding In Progress
-
-
UNDERTOW-2556 Make sure max-post-size check for a request with a content-length is done before any response is sent from the server
-
- Closed
-