New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ensure hostname is ascii #11746

Closed

ZachChuba wants to merge 1 commit into grpc:master from ZachChuba:okhttp-host

ZachChuba commented Dec 12, 2024

Implement fix to address potential security issue related to certificate validation in OkHttp

grpc-java is susceptible to CVE-2021-0341

This mirrors the okhttp patch for this exploit available in square/okhttp#6353


          Ensure hostname is ascii

e0eaf63

Ensure certificate from maliciously crafted domain is not accepted due to improper verifications

linux-foundation-easycla bot commented Dec 12, 2024

❌ The email address for the commit (e0eaf63) is not linked to the GitHub account, preventing the EasyCLA check. Consult this Help Article and GitHub Help to resolve. (To view the commit's email address, add .patch at the end of this PR page's URL.) For further assistance with EasyCLA, please submit a support request ticket.

ZachChuba closed this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet