Bump netty for CVE-2024-47535 (#3241)

Co-authored-by: Nabil Abdel-Hafeez <[email protected]>
zio · Dec 23, 2024 · e6fa725 · e6fa725
1 parent 57378d3
commit e6fa725
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -2,7 +2,7 @@ import sbt.*
 
 object Dependencies {
   val JwtCoreVersion                = "10.0.1"
-  val NettyVersion                  = "4.1.112.Final"
+  val NettyVersion                  = "4.1.116.Final"
   val NettyIncubatorVersion         = "0.0.25.Final"
   val ScalaCompactCollectionVersion = "2.12.0"
   val ZioVersion                    = "2.1.11"

diff --git a/zio-http/jvm/src/main/scala/zio/http/netty/server/ServerSSLDecoder.scala b/zio-http/jvm/src/main/scala/zio/http/netty/server/ServerSSLDecoder.scala
@@ -131,7 +131,7 @@ private[zio] class ServerSSLDecoder(sslConfig: SSLConfig, cfg: Server.Config) ex
     val httpBehaviour = sslConfig.behaviour
     if (in.readableBytes < 5)
       ()
-    else if (SslHandler.isEncrypted(in)) {
+    else if (SslHandler.isEncrypted(in, false)) {
       pipeline.replace(this, Names.SSLHandler, sslContext.newHandler(context.alloc()))
       ()
     } else {