Format: 1.8
Date: Wed, 28 Feb 2024 11:43:08 -0300
Source: netty
Binary: libnetty-java
Built-For-Profiles: noudeb
Architecture: all
Version: 1:4.1.48-7ubuntu0.1
Distribution: mantic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos03-amd64-019.buildd>
Changed-By: Paulo Flabiano Smorigo <pfsmorigo@canonical.com>
Description:
 libnetty-java - Java NIO client/server socket framework
Changes:
 netty (1:4.1.48-7ubuntu0.1) mantic-security; urgency=medium
 .
   * SECURITY UPDATE: Uncontrolled Resource Consumption
     - debian/patches/CVE-2023-34462.patch: netty-handler SniHandler 16MB
       allocation.
     - debian/patches/CVE-2023-44487.patch: HTTP/2 Rapid Reset Attack - DDoS
       vector in the HTTP/2 protocol due RST frames.
     - CVE-2023-34462
     - CVE-2023-44487
Checksums-Sha1:
 31be1580d5845c06e5984f400fb1aaf385a2fabc 3598102 libnetty-java_4.1.48-7ubuntu0.1_all.deb
 515fdc4d5be268d9f091a8174b13fd87d352458a 15394 netty_4.1.48-7ubuntu0.1_amd64.buildinfo
Checksums-Sha256:
 ef935ca6f4009d838c695195ebfc868126aaaa7f69ffc85543e9292041391704 3598102 libnetty-java_4.1.48-7ubuntu0.1_all.deb
 93b8638194210d0bf5b2a43822b0f79f49ede816c336f2117804d1868053b7aa 15394 netty_4.1.48-7ubuntu0.1_amd64.buildinfo
Files:
 43cf504a4bcc51b3ddac6fc9d3f78d2d 3598102 java optional libnetty-java_4.1.48-7ubuntu0.1_all.deb
 63a6377539f952a2569a28a3d8bebeae 15394 java optional netty_4.1.48-7ubuntu0.1_amd64.buildinfo
Original-Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>