UbuntuUpdates.org

Package "libnetty-java"

Name: libnetty-java

Description:

Java NIO client/server socket framework
Latest version: 1:4.1.48-9ubuntu0.1
Release: noble (24.04)
Level: security
Repository: universe
Head package: netty
Homepage: https://netty.io/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libnetty-java"

All arch deb package
APT INSTALL

Other versions of "libnetty-java" in Noble

Repository Area Version
base universe 1:4.1.48-9
updates universe 1:4.1.48-9ubuntu0.1

Changelog

Version: 1:4.1.48-9ubuntu0.1 2025-12-10 01:22:08 UTC

  netty (1:4.1.48-9ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: denial of service
    - debian/patches/CVE-2025-58057.patch: Adjust how decoders and
      decompressors manage buffers to prevent out-of-memory in
      .../http/HttpContentDecoder.java,
      .../http2/DelegatingDecompressorFrameListener.java,
      .../compression/JZlibDecoder.java, .../compression/JdkZlibDecoder.java,
      and add tests to .../http/HttpContentDecompressorTest.java and
      .../compression/{AbstractIntegrationTest.java,
      JZlibIntegrationTest.java, JdkZlibIntegrationTest.java}.
    - CVE-2025-58057
  * SECURITY UPDATE: HTTP request/response smuggling
    - debian/patches/CVE-2025-58056.patch: Enforce stricter parsing of line
      endings in .../http/{HttpObjectDecoder.java, HttpRequestDecoder.java,
      HttpResponseDecoder.java, InvalidChunkExtensionException.java,
      InvalidChunkTerminationException.java,
      InvalidLineSeparatorException.java} and add tests to
      .../http/{HttpRequestDecoderTest.java, HttpResponseDecoderTest.java}.
    - CVE-2025-58056

 -- Edwin Jiang <email address hidden> Thu, 27 Nov 2025 20:40:26 +0000
CVE-2025-58057 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients
CVE-2025-58056 Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In


About   -   Send Feedback to @ubuntu_updates