------------------------------------------------------------------- Tue Jun 10 12:21:00 UTC 2025 - Thomas Florio - Replace AlgorithmId.sha256WithRSAEncryption_oid usage with specify the OID directly - Security update * Decorate InputStream to throw an exception once the data read limit is reached (bsc#1233297 CVE-2024-47535) - Added: * netty-fix-compilation.patch * netty-CVE-2024-47535.patch ------------------------------------------------------------------- Fri Sep 30 15:15:33 UTC 2022 - Thomas Florio - Security update * The ZlibDecoders allow for unbounded memory allocation while decoding a byte stream (bsc#1168932 CVE-2020-11612) * Information disclosure via the local system temporary directory (bsc#1182103 CVE-2021-21290) * Bzip2Decoder doesn't allow setting size restrictions for decompressed data (bsc#1190610 CVE-2021-37136) * Snappy frame decoder doesn't restrict the chunk length and may buffer skippable chunks (bsc#1190613 CVE-2021-37137) - Added: * netty-CVE-2020-11612.patch * netty-CVE-2021-21290.patch * netty-CVE-2021-37136.patch * netty-CVE-2021-37137.patch ------------------------------------------------------------------- Sat Nov 28 20:52:53 UTC 2020 - stefan.bluhm@clacee.eu - Enhanced for RHEL8 ------------------------------------------------------------------- Fri Feb 7 14:05:39 UTC 2020 - Silvio Moioli - Upgraded to netty 4.1.44 ------------------------------------------------------------------- Thu May 30 12:31:51 UTC 2019 - Julio González Gil - Package does not build at aarch64, ppc64le and s390x, so build is now disabled, as package is exported from x86_64 to such architectures ------------------------------------------------------------------- Tue Oct 16 11:43:19 UTC 2018 - moio@suse.com - Add missing jar netty-resolver, required for bsc#1099988 ------------------------------------------------------------------- Wed Sep 12 08:58:12 UTC 2018 - moio@suse.com - Force use of OpenJDK 8. Other combinations will not work ------------------------------------------------------------------- Wed Sep 12 05:27:59 UTC 2018 - silvio@localhost - Asynchronous event-driven network application framework required for bsc#1099988 - Initial version