12891 matches found
ECHO-C57F-A4CC-6E45
Bulletin has no description...
ECHO-B6BB-C49F-2064
Bulletin has no description...
ECHO-F62C-6C16-552E GHSA-p85m-gvr3-788c: hostname verification skipped on the OpenSSL client path with a plain X509TrustManager when trust-manager wrapping is unavailable (Java 25+). Upstream's fix (in https://github.com/netty/netty/commit/9e05192391, 4.1.137.Final) only adds a check at context creation for an endpoint identification algorithm set with SslContextBuilder.endpointIdentificationAlgorithm(...), which netty added in 4.1.112.Final (0deca94aa1); 4.1.74.Final has no such setting. The other way to ask for hostname verification, SSLParameters on the engine, is the same in 4.1.74.Final and in fixed 4.1.137.Final (it sets SSL_CVERIFY_REQUIRED and leaves the check to the trust manager), and the fix does not change it. CVE-2026-50010, patched above, covers wrapping plain trust managers.
Bulletin has no description...
ECHO-AEFA-46B0-76F9
Bulletin has no description...
ECHO-5DD1-2D3F-55C1
Bulletin has no description...
ECHO-5640-40FE-97DC GHSA-2g37-3h88-55hc: WebSocketServerExtensionHandler's per-connection queue of negotiated extensions grows without bound with pipelined requests. Upstream's fix (https://github.com/netty/netty/commit/3574f7ed7a, 4.1.138.Final) caps that queue, which was introduced in 4.1.88.Final (https://github.com/netty/netty/commit/f761ab5620, #13180). 4.1.74.Final has no queue there: the handler keeps a single List<WebSocketServerExtension> field that each new upgrade request overwrites, so it cannot grow per request.
Bulletin has no description...
ECHO-1170-025A-A32A
Bulletin has no description...
ECHO-A352-A32A-7204
Bulletin has no description...
ECHO-067E-1724-C088
Bulletin has no description...
ECHO-9A76-72A2-0514
Bulletin has no description...
ECHO-A2C6-E32D-2364
Bulletin has no description...
ECHO-256F-F935-B04F
Bulletin has no description...
ECHO-8E5E-4B8F-548B
Bulletin has no description...
ECHO-2724-B4DD-50F1
Bulletin has no description...
ECHO-765C-58B0-9F34
Bulletin has no description...
ECHO-0B4D-BFAA-37E7
Bulletin has no description...
ECHO-9469-DA1D-F2FC
Bulletin has no description...
ECHO-EEEC-4E0A-613F
Bulletin has no description...
ECHO-7D9D-D420-EAFC
Bulletin has no description...
ECHO-225E-E2CD-AD0A
Bulletin has no description...
ECHO-DE64-4D5C-048E
Bulletin has no description...
ECHO-B364-774D-E3BF
Bulletin has no description...
ECHO-ACDF-44A6-A427
Bulletin has no description...
ECHO-19DF-2947-E8E1
Bulletin has no description...
ECHO-E65A-3154-FD37
Bulletin has no description...
ECHO-4CCB-80F0-3EF8
Bulletin has no description...
ECHO-908E-244C-DCA7
Bulletin has no description...
ECHO-64FA-4DDB-B371
Bulletin has no description...
ECHO-1C99-0035-149E
Bulletin has no description...
ECHO-656C-CFFF-015D
Bulletin has no description...
ECHO-B9B8-5237-C48C
Bulletin has no description...
ECHO-E389-B00B-174D
Bulletin has no description...
ECHO-4DC8-1AD6-163E
Bulletin has no description...
ECHO-422F-EF67-6961
Bulletin has no description...
ECHO-77FA-EF48-D1E6
Bulletin has no description...
ECHO-FF36-6FA5-B395
Bulletin has no description...
ECHO-CAD3-1632-1A49
Bulletin has no description...
ECHO-4876-E8DA-1E1E
Bulletin has no description...
ECHO-10A5-8616-F604
Bulletin has no description...
ECHO-BDFF-FEB2-AF0F
Bulletin has no description...
ECHO-4ACB-2CA6-359E
Bulletin has no description...
ECHO-02CA-6DF3-32B4
Bulletin has no description...
ECHO-9F73-4220-6634
Bulletin has no description...
ECHO-5E29-3EAF-6181
Bulletin has no description...
ECHO-4F62-9D56-C828
Bulletin has no description...
ECHO-F2D3-9FE0-FECC
Bulletin has no description...
ECHO-04AB-6024-6EEF
Bulletin has no description...
ECHO-1F28-F689-36D6
Bulletin has no description...