Issue with Undertow Client and SSL
by Thomas Segismont
Hi,
Openshift Origin uses Hawkular Metrics to store node and container data. In
this scenario, Hawkular Metrics calls the Kubernetes master server over
HTTPS to validate the client identity. This is implemented with Undertow
Client, as part of a ServletExtension (inside Wildfly 10) [1]. Works fine
in development and testing.
Now the Openshit team sees errors in the logs [2][3]. I couldn't reproduce
yet. Errors come in pair, first the "UT005001: An exception occurred
processing the request: java.lang.IllegalStateException: XNIO000017: Buffer
was already freed", and just after "XNIO001007: A channel event listener
threw an exception: java.lang.NullPointerException".
Does that ring a bell? I haven't been able to find a starting point by
looking into the source the code.
Thanks
--
Thomas Segismont
JBoss ON Engineering Team
[1] https://git.io/vrNyP
[2] https://issues.jboss.org/browse/HWKMETRICS-408
[3] https://issues.jboss.org/secure/attachment/12405779/hawkular.log
1 week, 5 days
- 4
- 5
Vulnerability Remediation Request for io.undertow:undertow-core:2.3.18.Final
by Kaiser Song
We are currently using version 2.3.18 of the library available at https://mvnrepository.com/artifact/io.undertow/undertow-core/2.3.18.Final. Given the stringent security requirements in the financial sector, using versions with known vulnerabilities is not feasible for our organization. However, version 2.3.18 contains vulnerabilities associated with CVE-2022-45868 and CVE-2020-13956. It would be greatly appreciated if an updated version that addresses these security vulnerabilities could be published to Maven Repository.
9 months, 2 weeks
- 2
- 1
- ← Newer
- 1
- Older →