Netty 4.1.39.Final released, this version mainly fixes some bug, while some performance enhancements. Most importantly, it fixes multiple HTTP / 2 security issues.
The main updates are as follows:
- HTTP2: prevents null data frames (not end_of_stream flag) set ( # 9461 )
- HTTP2: For added protection (remote control frame of the remote peer triggered # 9460 )
- Provided from the custom header ORIGIN header, if it exists ( # 9435 )
- When you create a EpollDatagramChannel use InternetProtocolFamily, do not cache the local / remote address ( # 9436 )
- Repair HttpUtil.getCharset not throw IllegalCharsetNameException ( # 9439 )
For more details, see the announcement .