{"id":5798,"date":"2026-07-02T18:52:22","date_gmt":"2026-07-02T10:52:22","guid":{"rendered":"https:\/\/www.xttblog.com\/?p=5798"},"modified":"2026-07-02T18:52:22","modified_gmt":"2026-07-02T10:52:22","slug":"netty-4-2-15-%e7%b4%a7%e6%80%a5%e5%8f%91%e5%b8%83%ef%bc%8c22-%e4%b8%aa-cve-%e6%bc%8f%e6%b4%9e%ef%bc%8c10-%e4%b8%aa%e5%86%85%e5%ad%98%e8%80%97%e5%b0%bd%e3%80%813-%e4%b8%aa-dns-%e6%8a%95%e6%af%92","status":"publish","type":"post","link":"https:\/\/www.xttblog.com\/?p=5798","title":{"rendered":"Netty 4.2.15 \u7d27\u6025\u53d1\u5e03\uff0c22 \u4e2a CVE \u6f0f\u6d1e\uff0c10 \u4e2a\u5185\u5b58\u8017\u5c3d\u30013 \u4e2a DNS \u6295\u6bd2"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u4ee5\u524d\uff0c\u6211\u4eec\u8bf4 Log4j\u3001Fastjson \u662f\u6f0f\u6d1e\u4e4b\u738b\u3002\u73b0\u5728 AI \u6765\u4e86\uff0c\u53d1\u73b0\u51e0\u4e4e\u4e3b\u6d41\u6846\u67b6\u90fd\u6210\u4e86\u6f0f\u6d1e\u4e4b\u738b\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u5176\u4e2d\u7684\u539f\u56e0\u5c31\u662f\uff0cAI \u53d1\u73b0\u6f0f\u6d1e\u592a\u5feb\uff0c \u800c\u4e14\u627e\u7684\u8fd8\u5f88\u51c6\u786e\u3002\u8fd9\u4e0d\uff0c\u4eca\u5929\u6211\u7a81\u7136\u53d1\u73b0 Netty \u4e5f\u66f4\u65b0\u4e86\u4e00\u4e2a\u65b0\u7248\u672c\uff0c\u4e00\u6b21\u53d1\u7248\u4fee\u4e86 22 \u4e2a\u6f0f\u6d1e\uff0c10 \u4e2a\u5185\u5b58\u8017\u5c3d\u30013 \u4e2a DNS \u6295\u6bd2\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u7531\u4e8e\u6f0f\u6d1e\u592a\u591a\u4e86\uff0c\u5b98\u65b9\u4e00\u6b21\u53d1\u4e0d\u4e86\u4e24\u4e2a\u7248\u672c\uff0cNetty 4.2.15.Final \u548c 4.1.135.Final\u3002\u6839\u636e\u5b98\u65b9 Release Note \u53ef\u77e5\uff0c4.2.15 \u7248\u672c\u5171\u4fee\u590d\u4e86 22 \u4e2a CVE\uff0c\u5176\u4e2d\u591a\u4e2a\u88ab\u8bc4\u4e3a<code>\u9ad8\u5371\uff08High\uff09<\/code>\u7ea7\u522b\uff0c\u6db5\u76d6\u5185\u5b58\u8017\u5c3d\u3001DNS \u7f13\u5b58\u4e2d\u6bd2\u3001\u8bf7\u6c42\u8d70\u79c1\u3001TLS \u7ed5\u8fc7\u7b49\u7ecf\u5178\u653b\u51fb\u5411\u91cf\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u503c\u5f97\u6ce8\u610f\u7684\u662f\uff0c\u8fd9\u5df2\u7ecf\u662f 2026 \u5e74\u4ee5\u6765 Netty \u7b2c\u4e09\u6b21\u5927\u89c4\u6a21\u5b89\u5168\u66f4\u65b0\u3002\u65e9\u5728 4 \u6708\u4efd\u7684 4.2.13\u30014.1.133 \u7248\u672c\u4e2d\uff0c\u5c31\u5df2\u7ecf\u4fee\u590d\u4e86 13 \u4e2a CVE\uff1b\u800c\u6700\u8fd1\u7684\u8fd9\u6b21\u66f4\u65b0\uff0c\u6f0f\u6d1e\u6570\u91cf\u548c\u4e25\u91cd\u7a0b\u5ea6\u90fd\u518d\u521b\u65b0\u9ad8\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u8fd9\u6b21\u5230\u5e95\u4fee\u4e86\u4ec0\u4e48\uff1f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u6211\u5c06 22 \u4e2a CVE \u6309\u653b\u51fb\u7c7b\u578b\u5206\u7c7b\uff0c\u65b9\u4fbf\u5927\u5bb6\u5feb\u901f\u5b9a\u4f4d\u98ce\u9669\uff0c\u4e0b\u9762\u5206\u522b\u5c55\u5f00\u770b\u770b\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6587\u7ae0\u914d\u56fe\u53c2\u89c1 <a href=\"https:\/\/mp.weixin.qq.com\/s\/8VkJz2tM89DsCc0_Jb-2og\">https:\/\/mp.weixin.qq.com\/s\/8VkJz2tM89DsCc0_Jb-2og<\/a>\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u5185\u5b58\u8017\u5c3d\u7c7b\uff08DoS\uff09<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u662f\u672c\u6b21\u66f4\u65b0\u6700\u5bc6\u96c6\u7684\u6f0f\u6d1e\u7c7b\u578b\uff0c\u5c5e\u4e8e\u91cd\u707e\u533a\uff0c\u5171\u6d89\u53ca<code>10 \u4e2a CVE<\/code>\u3002<\/p>\n\n\n\n<table class=\"wp-block-table\"><thead><tr><th>CVE \u7f16\u53f7<\/th><th>\u5f71\u54cd\u6a21\u5757<\/th><th>\u6838\u5fc3\u98ce\u9669<\/th><\/tr><\/thead><tbody><tr><td>CVE-2026-48059<\/td><td>netty-codec-haproxy<\/td><td>HAProxy \u534f\u8bae\u89e3\u6790\u5185\u5b58\u6cc4\u6f0f<\/td><\/tr><tr><td>CVE-2026-44893<\/td><td>netty-codec-haproxy<\/td><td>SSL TLV \u89e3\u6790\u5bfc\u81f4\u5185\u5b58\u6cc4\u6f0f<\/td><\/tr><tr><td>CVE-2026-50011<\/td><td>netty-codec-redis<\/td><td>Redis \u6570\u7ec4\u805a\u5408\u5668\u65e0\u9650\u5d4c\u5957<\/td><\/tr><tr><td>CVE-2026-44250<\/td><td>netty-codec-redis<\/td><td>\u540c\u4e0a<\/td><\/tr><tr><td>CVE-2026-44890<\/td><td>netty-codec-redis<\/td><td>\u540c\u4e0a<\/td><\/tr><tr><td>CVE-2026-48006<\/td><td>netty-codec-redis<\/td><td>\u540c\u4e0a<\/td><\/tr><tr><td>CVE-2026-44892<\/td><td>netty-codec-http3<\/td><td>HTTP\/3 \u5185\u5b58\u8017\u5c3d<\/td><\/tr><tr><td>CVE-2026-48748<\/td><td>netty-codec-http3<\/td><td>\u540c\u4e0a<\/td><\/tr><tr><td>CVE-2026-48043<\/td><td>netty-codec-http2<\/td><td>HTTP\/2 \u5185\u5b58\u8017\u5c3d<\/td><\/tr><tr><td>CVE-2026-46340<\/td><td>netty-transport-sctp<\/td><td>SCTP \u6d88\u606f\u788e\u7247\u8017\u5c3d\u5185\u5b58<\/td><\/tr><\/tbody><\/table>\n\n\n\n<p class=\"wp-block-paragraph\">\u5c31\u62ff CVE-2026-48059 \u6765\u8bf4\uff0cHAProxy PROXY \u534f\u8bae v2 \u89e3\u7801\u5668\u5728\u5904\u7406\u5d4c\u5957\u7684<code>PP2_TYPE_SSL<\/code> TLV \u65f6\uff0c\u5b58\u5728\u5f15\u7528\u8ba1\u6570\u6cc4\u6f0f\u3002\u653b\u51fb\u8005\u53d1\u9001\u7279\u5236\u7684\u5d4c\u5957 SSL \u7c7b\u578b\u8bb0\u5f55\uff0c\u4f1a\u5bfc\u81f4\u5e95\u5c42<code>ByteBuf<\/code>\u88ab\u6c38\u4e45\u56fa\u5b9a\uff08pinned\uff09\uff0c\u65e0\u6cd5\u56de\u6536\u5230\u5185\u5b58\u6c60\u3002\u7531\u4e8e Netty \u9ed8\u8ba4\u4f7f\u7528\u6c60\u5316\u76f4\u63a5\u5185\u5b58\uff0c\u8fd9\u79cd\u6cc4\u6f0f\u4f1a\u9010\u6b65\u8017\u5c3d JVM \u7684\u76f4\u63a5\u5185\u5b58\u914d\u989d\uff0c\u6700\u7ec8\u89e6\u53d1 OOM \u5bfc\u81f4\u670d\u52a1\u4e0d\u53ef\u7528\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">DNS \u7f13\u5b58\u4e2d\u6bd2<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u6709\u4e09\u4e2a DNS \u76f8\u5173 CVE \u6784\u6210\u4e86\u5b8c\u6574\u7684 Kaminsky \u653b\u51fb\u94fe\uff0c\u8fd9\u662f\u4e00\u7c7b\u9690\u853d\u4e14\u5371\u9669\u7684\u6f0f\u6d1e\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>CVE-2026-47691\uff08\u9ad8\u5371\uff09<\/li><li>CVE-2026-45673<\/li><li>CVE-2026-45674\uff08\u9ad8\u5371\uff09<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u7c7b\u6f0f\u6d1e\u4ea7\u751f\u7684\u4e3b\u8981\u539f\u56e0\u662f Netty \u7684 DNS \u89e3\u6790\u5668\u4f7f\u7528\u4e86<code>\u53ef\u9884\u6d4b\u7684\u4f2a\u968f\u673a\u6570\u751f\u6210\u5668\uff08PRNG\uff09<\/code>\u751f\u6210 DNS \u4e8b\u52a1 ID\uff0c\u4e14\u9ed8\u8ba4\u4f7f\u7528<code>\u9759\u6001 UDP \u6e90\u7aef\u53e3<\/code>\u3002\u8fd9\u5927\u5927\u964d\u4f4e\u4e86 DNS \u67e5\u8be2\u7684\u71b5\u503c\uff0c\u4f7f\u653b\u51fb\u8005\u80fd\u591f\u4f2a\u9020 DNS \u54cd\u5e94\uff0c\u6c61\u67d3\u89e3\u6790\u7f13\u5b58\uff0c\u5c06\u6d41\u91cf\u52ab\u6301\u5230\u6076\u610f\u670d\u52a1\u5668\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u8bf7\u6c42\u8d70\u79c1\u4e0e\u534f\u8bae\u7ed5\u8fc7<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u5bf9\u5e94\u7684\u6f0f\u6d1e\u5982\u4e0b\u8868\u683c\u6240\u793a\u3002<\/p>\n\n\n\n<table class=\"wp-block-table\"><thead><tr><th>CVE \u7f16\u53f7<\/th><th>\u5f71\u54cd\u6a21\u5757<\/th><th>\u653b\u51fb\u573a\u666f<\/th><\/tr><\/thead><tbody><tr><td>CVE-2026-50020<\/td><td>netty-codec-http<\/td><td>HTTP\/1.1 \u8bf7\u6c42\u8d70\u79c1<\/td><\/tr><tr><td>CVE-2026-44249<\/td><td>netty-handler<\/td><td>IPv6 \u5b50\u7f51\u89c4\u5219\u7ed5\u8fc7<\/td><\/tr><tr><td>CVE-2026-50010<\/td><td>netty-handler<\/td><td>TLS \u4e3b\u673a\u540d\u9a8c\u8bc1\u88ab\u9759\u9ed8\u7981\u7528<\/td><\/tr><\/tbody><\/table>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u5176\u4e2d CVE-2026-44249 \u975e\u5e38\u503c\u5f97\u8b66\u60d5\u3002\u7531\u4e8e<code>IpSubnetFilterRule.compareTo()<\/code>\u4e2d\u7684\u63a9\u7801\u64cd\u4f5c\u9519\u8bef\uff0c\u5408\u6cd5\u7684\u516c\u7f51 IPv6 \u5730\u5740\u53ef\u4ee5\u7ed5\u8fc7\u5b50\u7f51\u8fc7\u6ee4\u89c4\u5219\u3002\u8fd9\u610f\u5473\u7740\u57fa\u4e8e IP \u767d\u540d\u5355\u7684\u8bbf\u95ee\u63a7\u5236\u53ef\u80fd\u5b8c\u5168\u5931\u6548\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u5176\u4ed6\u9ad8\u5371\u6f0f\u6d1e<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u9664\u4e86\u4e0a\u9762\u6240\u8bf4\u7684\u4e4b\u5916\uff0c\u8fd8\u6709\u4e0b\u9762 4 \u4e2a\u9ad8\u5371\u6f0f\u6d1e\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>CVE-2026-50560\uff08HTTP\/2 DDoS\uff09\uff1a\u5229\u7528 HTTP\/2 \u6d41\u63a7\u5236\u673a\u5236\uff0c\u5355\u5ba2\u6237\u7aef\u53ef\u5feb\u901f\u8017\u5c3d\u670d\u52a1\u5668\u5185\u5b58<\/li><li>CVE-2026-44894\uff08QUIC \u6d41\u91cf\u653e\u5927\uff09\uff1aQUIC \u534f\u8bae\u5b9e\u73b0\u4e2d\u7684\u6d41\u91cf\u653e\u5927\u6f0f\u6d1e<\/li><li>CVE-2026-45416\uff08SNIHandler \u5185\u5b58\u8fc7\u91cf\uff09\uff1aTLS SNI \u5904\u7406\u4e2d\u7684\u5185\u5b58\u5206\u914d\u5931\u63a7<\/li><li>CVE-2026-45536\uff08\u6587\u4ef6\u63cf\u8ff0\u7b26\u6cc4\u6f0f\uff09\uff1aepoll\/kqueue \u4f20\u8f93\u5c42\u7684 fd \u6cc4\u6f0f<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">\u9664\u4e86\u5b89\u5168\uff0c\u8fd8\u6709\u4ec0\u4e48\uff1f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u5982\u679c\u6709\u7f51\u53cb\u8fd8\u5728\u4f7f\u7528 4.1.x \u7248\u672c\uff0c\u9664\u4e86\u5b89\u5168\u4fee\u590d\uff0c4.2 \u4e3b\u7ebf\u7248\u672c\u8fd8\u5e26\u6765\u4e86\u4e0b\u9762\u8fd9\u4e9b\u503c\u5f97\u5173\u6ce8\u7684\u67b6\u6784\u6539\u8fdb\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u81ea\u9002\u5e94\u5185\u5b58\u5206\u914d\u5668<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Netty 4.2 \u5c06\u5b9e\u9a8c\u6027\u7684\u81ea\u9002\u5e94\u5206\u914d\u5668 AdaptiveByteBufAllocator \u63d0\u5347\u4e3a<code>\u9ed8\u8ba4\u9009\u9879<\/code>\uff0c\u66ff\u4ee3\u4e86\u4f20\u7edf\u7684\u6c60\u5316\u5206\u914d\u5668\u3002\u5b83\u80fd\u591f\uff1a<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>\u6839\u636e\u5de5\u4f5c\u8d1f\u8f7d\u81ea\u52a8\u8c03\u6574\u5185\u5b58\u5206\u914d\u7b56\u7565<\/li><li>\u4e0e Java \u865a\u62df\u7ebf\u7a0b\uff08Virtual Threads\uff09\u66f4\u597d\u5730\u534f\u540c\u5de5\u4f5c<\/li><li>\u5728\u591a\u6570\u573a\u666f\u4e0b\u964d\u4f4e\u5185\u5b58\u5360\u7528\uff0c\u63d0\u5347\u541e\u5410\u91cf<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u4e0d\u8fc7\u5b98\u65b9\u4e5f\u5f88\u5766\u8bda\uff0c\u67d0\u4e9b\u7279\u5b9a\u8d1f\u8f7d\u4e0b\uff0c\u81ea\u9002\u5e94\u5206\u914d\u5668\u53ef\u80fd\u8868\u73b0\u4e0d\u5982\u6c60\u5316\u5206\u914d\u5668\u3002\u5982\u679c\u5347\u7ea7\u540e\u89c2\u5bdf\u5230 GC \u538b\u529b\u589e\u5927\uff0c\u53ef\u4ee5\u901a\u8fc7<code>-Dio.netty.allocator.type=pooled<\/code>\u56de\u9000\u5230\u4f20\u7edf\u6a21\u5f0f\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">io_uring \u6b63\u5f0f\u6bd5\u4e1a<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Linux \u9ad8\u6027\u80fd\u5f02\u6b65 I\/O \u673a\u5236 io_uring \u4ece\u201c\u5b75\u5316\u5668\u201d\u6a21\u5757\u6b63\u5f0f\u6210\u4e3a\u4e00\u7b49\u516c\u6c11\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>\u5305\u540d\u4ece<code>io.netty.incubator.channel.uring<\/code>\u53d8\u4e3a<code>io.netty.channel.uring<\/code><\/li><li>\u7c7b\u540d\u524d\u7f00\u7edf\u4e00\u4e3a<code>IoUring<\/code>\uff08\u6ce8\u610f\u5927\u5c0f\u5199\u53d8\u5316\uff09<\/li><li>\u9700\u8981 Java 9+ \u652f\u6301<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u6839\u636e Cassandra \u7b49\u9879\u76ee\u7684\u6d4b\u8bd5\uff0cio_uring \u76f8\u6bd4 epoll \u80fd\u663e\u8457\u51cf\u5c11\u7cfb\u7edf\u8c03\u7528\u6b21\u6570\uff0c\u63d0\u5347 I\/O \u5bc6\u96c6\u578b\u5e94\u7528\u7684\u6027\u80fd\u3002<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u7edf\u4e00\u4e8b\u4ef6\u5faa\u73af\u7ec4<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u9664\u6b64\u4e4b\u5916\uff0c\u65b0\u7684 4.2 \u7248\u672c\u8fd8\u6253\u7834\u4e86 4.1 \u7248\u672c\u4e2d EventLoopGroup \u4e0e\u4f20\u8f93\u5b9e\u73b0\u7684\u7d27\u8026\u5408\uff0c\u7edf\u4e00\u4e86\u4e8b\u4ef6\u5faa\u73af\u7ec4\uff08MultiThreadIoEventLoopGroup\uff09\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/\/ 4.1 \u65f6\u4ee3\nnew EpollEventLoopGroup();\n\n\/\/ 4.2 \u65f6\u4ee3\nnew MultiThreadIoEventLoopGroup(EpollIoHandler.newFactory());<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u79cd\u8bbe\u8ba1\u8ba9\u76d1\u63a7\u548c\u5b9a\u5236\u66f4\u52a0\u7075\u6d3b\uff0c\u53ef\u4ee5\u7cbe\u786e\u7edf\u8ba1\u6bcf\u4e2a EventLoop \u7684 I\/O \u5904\u7406\u65f6\u95f4\u3001\u4efb\u52a1\u5904\u7406\u65f6\u95f4\u3001\u6ce8\u518c\u7684 Channel \u6570\u91cf\u7b49\u6307\u6807\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Netty \u8fd8\u7a33\u5417\uff1f<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u9762\u5bf9\u5bc6\u96c6\u7684\u5b89\u5168\u66f4\u65b0\uff0cNetty \u8fd8\u53ef\u9760\u5417\uff1f\u662f\u5426\u503c\u5f97\u7ee7\u7eed\u6295\u5165\uff1f<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u70b9\u522b\u614c\uff0cNetty \u7684\u6838\u5fc3\u7ef4\u62a4\u8005 Norman Maurer\uff08Apple \u6770\u51fa\u5de5\u7a0b\u5e08\uff09\u548c Chris Vest \u7b49\u6838\u5fc3\u6210\u5458\u6301\u7eed\u6d3b\u8dc3\u3002\u800c\u4e14\u4ece GitHub \u63d0\u4ea4\u8bb0\u5f55\u770b\uff0c2026 \u5e74\u4ee5\u6765 Norman Maurer \u4e2a\u4eba\u5c31\u63d0\u4ea4\u4e86\u6570\u5341\u4e2a\u5b89\u5168\u4fee\u590d PR\uff0c\u54cd\u5e94\u901f\u5ea6\u6781\u5feb\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u51b5\u4e14\uff0cNetty \u7684\u751f\u6001\u6839\u57fa\u6df1\u539a\uff0c\u5b83\u4ecd\u662f Java \u9ad8\u6027\u80fd\u7f51\u7edc\u7f16\u7a0b\u7684\u4e8b\u5b9e\u6807\u51c6\u3002<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>\u6570\u636e\u5e93\uff1aCassandra\u3001Elasticsearch<\/li><li>\u6d88\u606f\u961f\u5217\uff1aRocketMQ<\/li><li>RPC \u6846\u67b6\uff1agRPC\u3001Dubbo<\/li><li>\u54cd\u5e94\u5f0f\u6846\u67b6\uff1aSpring WebFlux\u3001Vert.x<\/li><li>\u4e91\u539f\u751f\uff1aMicronaut\u3001Quarkus<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u76ee\u524d\uff0cSpring Boot 4.1.0\u3001Micronaut 5.0.2 \u7b49\u4e3b\u6d41\u6846\u67b6\u5df2\u7387\u5148\u5347\u7ea7\u81f3 Netty 4.2.15\u3002\u4f46\u8fd9\u4e5f\u610f\u5473\u7740\uff0cNetty \u4e00\u6bb5\u51fa\u4e8b\uff0c\u5f71\u54cd\u8303\u56f4\u975e\u5e38\u5e7f\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u603b\u7ed3<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Netty 4.2.15 \u7684\u53d1\u5e03\uff0c\u65e2\u662f\u4e00\u6b21<code>\u5b89\u5168\u8865\u4e01\u7684\u96c6\u4e2d\u7206\u53d1<\/code>\uff0c\u4e5f\u662f 4.2 \u67b6\u6784\u6210\u719f\u5ea6\u7684\u9a8c\u8bc1\u3002\u5bf9\u4e8e\u751f\u4ea7\u73af\u5883\uff0c\u5b98\u65b9\u5efa\u8bae\uff1a<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>\u4e24\u5468\u5185\u5b8c\u6210\u5347\u7ea7\uff1a\u6d89\u53ca\u5185\u5b58\u8017\u5c3d\u548c DNS \u4e2d\u6bd2\u7684 CVE \u5747\u4e3a\u9ad8\u5371\uff0c\u4e14\u90e8\u5206\u5df2\u6709\u516c\u5f00\u5229\u7528\u7ec6\u8282<\/li><li>\u4f18\u5148\u68c0\u67e5 Redis\/HAProxy \u6a21\u5757\uff1a\u5982\u679c\u4f60\u7684\u670d\u52a1\u4f7f\u7528\u4e86\u8fd9\u4e9b\u534f\u8bae\uff0c\u98ce\u9669\u655e\u53e3\u6700\u5927<\/li><li>4.1 \u7528\u6237\u5efa\u8bae\u89c4\u5212\u8fc1\u79fb\uff1a\u5b98\u65b9\u5df2\u660e\u786e 4.1 \u4ec5\u63a5\u6536 bug \u4fee\u590d\uff0c\u65b0\u7279\u6027\u53ea\u5728 4.2 \u53d1\u5c55<\/li><li>\u5347\u7ea7\u540e\u91cd\u70b9\u76d1\u63a7\uff1a\u76f4\u63a5\u5185\u5b58\u4f7f\u7528\u91cf\u3001GC \u9891\u7387\u3001TLS \u8fde\u63a5\u9519\u8bef\u7387<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">AI \u8fd9\u6ce2\u72c2\u6f6e\uff0c\u5e26\u6765\u4e86\u5de8\u91cf\u7684\u6f0f\u6d1e\u88ab\u53d1\u73b0\u3002\u77ed\u65f6\u95f4\u5185\uff0c\u7ed9\u793e\u533a\u548c\u76f8\u5173\u751f\u6001\uff0c\u4ee5\u53ca\u7a0b\u5e8f\u5458\u7b49\u90fd\u5e26\u6765\u4e86\u4e0d\u5c0f\u51b2\u51fb\u3002\u522b\u7684\u4e0d\u8bf4\uff0c\u770b\u770b\u4eca\u5929\u7684\u80a1\u5e02\u5c31\u77e5\u9053\u4e86 &#x1f923;\u3002<\/p>\n<!-- <audio autoplay=\"autoplay\" height=\"100\" width=\"100\" hidden=\"true\"><source src=\"https:\/\/c.coka.la\/orAvPR.mp3\" type=\"audio\/mp3\"\/><\/audio><img decoding=\"async\" src=\"https:\/\/images.weserv.nl\/?url=https:\/\/ws3.sinaimg.cn\/large\/8fa5dcfcgy1g4em3rzar5j20ib089ae0.jpg\" alt=\"\u4e1a\u4f59\u8349\u516c\u4f17\u53f7\"\/> --><p><!-- <img decoding=\"async\" src=\"https:\/\/raw.githubusercontent.com\/xmt1139057136\/xttblog\/master\/8fa5dcfcgy1g4em3rzar5j20ib089ae0.jpg\" alt=\"\u4e1a\u4f59\u8349\u516c\u4f17\u53f7\"\/>--><img decoding=\"async\" src=\"https:\/\/saas.51autoparts.cn\/api\/admin\/sys-file\/oss\/file?fileName=84db51f8561e448f9a4fda2eff0811f9.jpg\" alt=\"\u4e1a\u4f59\u8349\u516c\u4f17\u53f7\"\/><\/p><p>\u6700\u540e\uff0c\u6b22\u8fce\u5173\u6ce8\u6211\u7684\u4e2a\u4eba\u5fae\u4fe1\u516c\u4f17\u53f7\uff1a\u4e1a\u4f59\u8349\uff08yyucao\uff09\uff01<b>\u53ef\u52a0\u4f5c\u8005\u5fae\u4fe1\u53f7\uff1a<font color=\"red\">xttblog2<\/font>\u3002\u5907\u6ce8\uff1a\u201c1\u201d\uff0c\u6dfb\u52a0\u535a\u4e3b\u5fae\u4fe1\u62c9\u4f60\u8fdb\u5fae\u4fe1\u7fa4\u3002\u5907\u6ce8\u9519\u8bef\u4e0d\u4f1a\u540c\u610f\u597d\u53cb\u7533\u8bf7\u3002<\/b>\u518d\u6b21\u611f\u8c22\u60a8\u7684\u5173\u6ce8\uff01\u540e\u7eed\u6709\u7cbe\u5f69\u5185\u5bb9\u4f1a\u7b2c\u4e00\u65f6\u95f4\u53d1\u7ed9\u60a8\uff01\u539f\u521b\u6587\u7ae0\u6295\u7a3f\u8bf7\u53d1\u9001\u81f3532009913@qq.com\u90ae\u7bb1\u3002\u5546\u52a1\u5408\u4f5c\u4e5f\u53ef\u6dfb\u52a0\u4f5c\u8005\u5fae\u4fe1\u8fdb\u884c\u8054\u7cfb\uff01<\/p><p>\u672c\u6587\u539f\u6587\u51fa\u5904\uff1a<a href=\"https:\/\/www.xttblog.com\">\u4e1a\u4f59\u8349<\/a>\uff1a &raquo; <a href=\"https:\/\/www.xttblog.com\/?p=5798\">Netty 4.2.15 \u7d27\u6025\u53d1\u5e03\uff0c22 \u4e2a CVE \u6f0f\u6d1e\uff0c10 \u4e2a\u5185\u5b58\u8017\u5c3d\u30013 \u4e2a DNS \u6295\u6bd2<\/a><\/p><!-- <div class=\"bd-reward-stl\"><button id=\"bdRewardBtn\"><span><\/span><\/button><\/div> -->","protected":false},"excerpt":{"rendered":"<p>\u4ee5\u524d\uff0c\u6211\u4eec\u8bf4 Log4j\u3001Fastjson \u662f\u6f0f\u6d1e\u4e4b\u738b\u3002\u73b0\u5728 AI \u6765\u4e86\uff0c\u53d1\u73b0\u51e0\u4e4e\u4e3b\u6d41\u6846\u67b6\u90fd\u6210\u4e86\u6f0f\u6d1e\u4e4b\u738b\u3002 \u8fd9 [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[358,354,355,803,243],"class_list":["post-5798","post","type-post","status-publish","format-standard","hentry","category-java","tag-admin","tag-sql","tag-xss","tag-803","tag-243"],"_links":{"self":[{"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/posts\/5798","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5798"}],"version-history":[{"count":1,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/posts\/5798\/revisions"}],"predecessor-version":[{"id":5799,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=\/wp\/v2\/posts\/5798\/revisions\/5799"}],"wp:attachment":[{"href":"https:\/\/www.xttblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5798"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5798"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xttblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5798"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}