UbuntuUpdates.org

Package "libnetty-java"

Name: libnetty-java

Description:

Java NIO client/server socket framework
Latest version: 1:4.1.48-4+deb11u2ubuntu0.1
Release: jammy (22.04)
Level: security
Repository: universe
Head package: netty
Homepage: http://netty.io/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libnetty-java"

All arch deb package
APT INSTALL

Other versions of "libnetty-java" in Jammy

Repository Area Version
base universe 1:4.1.48-4
updates universe 1:4.1.48-4+deb11u2ubuntu0.1

Changelog

Version: 1:4.1.48-4+deb11u2ubuntu0.1 2025-12-10 01:22:05 UTC

  netty (1:4.1.48-4+deb11u2ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: denial of service
    - debian/patches/CVE-2025-58057.patch: Adjust how decoders and
      decompressors manage buffers to prevent out-of-memory in
      .../http/HttpContentDecoder.java,
      .../http2/DelegatingDecompressorFrameListener.java,
      .../compression/JZlibDecoder.java, .../compression/JdkZlibDecoder.java,
      and add tests to .../http/HttpContentDecompressorTest.java and
      .../compression/{AbstractIntegrationTest.java,
      JZlibIntegrationTest.java, JdkZlibIntegrationTest.java}.
    - CVE-2025-58057
  * SECURITY UPDATE: HTTP request/response smuggling
    - debian/patches/CVE-2025-58056.patch: Enforce stricter parsing of line
      endings in .../http/{HttpObjectDecoder.java, HttpRequestDecoder.java,
      HttpResponseDecoder.java, InvalidChunkExtensionException.java,
      InvalidChunkTerminationException.java,
      InvalidLineSeparatorException.java} and add tests to
      .../http/{HttpRequestDecoderTest.java, HttpResponseDecoderTest.java}.
    - CVE-2025-58056

 -- Edwin Jiang <email address hidden> Thu, 27 Nov 2025 20:44:42 +0000
Source diff to previous version
CVE-2025-58057 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients
CVE-2025-58056 Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In

Version: 1:4.1.48-4+deb11u2build0.22.04.1 2024-09-05 16:07:38 UTC

  netty (1:4.1.48-4+deb11u2build0.22.04.1) jammy-security; urgency=medium

  * fake sync from Debian
Source diff to previous version

Version: 1:4.1.48-4+deb11u1build0.22.04.1 2023-04-28 01:07:10 UTC

  netty (1:4.1.48-4+deb11u1build0.22.04.1) jammy-security; urgency=medium

  * fake sync from Debian


About   -   Send Feedback to @ubuntu_updates