Skip to content

Update the Netty to latest version (4.1.108.Final) - Vulnerability CVE-2024-29025 #964

Description

@bebaskar

Currently Finagle library has Netty version as 4.1.100.Final which is vulnerable with https://gist.github.com/vietj/f558b8ea81ec6505f1e9a6ca283c9ae3 ( CVE-2024-29025) .

To remove this Netty version should be >= 4.1.108 Final.

Steps to reproduce the behavior:

Scan the docker image with twistcli (https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/tools/twistcli_scan_images)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions