tocsin

Debian/netty: high 7.5

Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exis

Action: Upgrade netty to 1:4.1.45-1 or later.

Affected

introducedfixedlast affected
01:4.1.45-1-

Fixed versions

1:4.1.45-1

Sources

published · modified · JSON