You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@servicecomb.apache.org by "JedrekWang (via GitHub)" <gi...@apache.org> on 2025/02/12 09:29:20 UTC

[I] 修复CVE-2025-24970漏洞 [servicecomb-java-chassis]

JedrekWang opened a new issue, #4717:
URL: https://github.com/apache/servicecomb-java-chassis/issues/4717

   #### 背景
   netty新增了一个漏洞CVE-2025-24970,vertx侧在[4.5.13](https://github.com/vert-x3/wiki/wiki/4.5.13-Release-Notes)版本集成了修复此漏洞的netty版本4.1.118.Final,servicecomb 2.8.x当前最新代码集成的vertx版本仍为4.5.10
   
   #### 建议
   
   建议servicecomb侧升级vertx版本到4.5.13,修复CVE-2025-24970漏洞


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@servicecomb.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] 修复CVE-2025-24970漏洞 [servicecomb-java-chassis]

Posted by "JedrekWang (via GitHub)" <gi...@apache.org>.
JedrekWang commented on issue #4717:
URL: https://github.com/apache/servicecomb-java-chassis/issues/4717#issuecomment-2663123460

   我看pull request好像 2.8.x没有同步修改?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@servicecomb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] 修复CVE-2025-24970漏洞 [servicecomb-java-chassis]

Posted by "liubao68 (via GitHub)" <gi...@apache.org>.
liubao68 closed issue #4717: 修复CVE-2025-24970漏洞
URL: https://github.com/apache/servicecomb-java-chassis/issues/4717


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@servicecomb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [I] 修复CVE-2025-24970漏洞 [servicecomb-java-chassis]

Posted by "SweetWuXiaoMei (via GitHub)" <gi...@apache.org>.
SweetWuXiaoMei commented on issue #4717:
URL: https://github.com/apache/servicecomb-java-chassis/issues/4717#issuecomment-2655264711

   好,尽快修复


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@servicecomb.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org