shield Security update for aalto-xml, flatten-maven-plugin, jctools, moditect, netty, netty-tcnative

SUSE-SLE-Module-Development-Tools-15-SP5-2024-4407

This update for aalto-xml, flatten-maven-plugin, jctools, moditect, netty, netty-tcnative fixes the following issues: - CVE-2024-47535: Fixed unsafe reading of large environment files when Netty is loaded by a java application can lead to a crash due to the JVM memory limit being exceeded in netty (bsc#1233297) Other fixes: - Upgraded netty to upstream version 4.1.115 - Upgraded netty-tcnative to version 2.0.69 Final - Updated jctools to version 4.0.5 - Updated aalto-xml to version 1.3.3 - Updated moditect to version 1.2.2 - Updated flatten-maven-plugin to version 1.6.0

• Release Date
  Dec 23 2024
• References
  Bugzilla: 1233297, 1047218
  CVEs: CVE-2024-47535
• Type
  security
• Severity
  moderate

cloud_download Downloads

Development Tools Module 15.5 s390x

• Packages
  netty-tcnative
  Fork of Tomcat Native with improved OpenSSL and mavenized build

  2.0.69-150200.3.22.1 lock rpm lock src

Development Tools Module 15.5 aarch64

• Packages
  netty-tcnative
  Fork of Tomcat Native with improved OpenSSL and mavenized build

  2.0.69-150200.3.22.1 lock rpm lock src

Development Tools Module 15.5 ppc64le

• Packages
  netty-tcnative
  Fork of Tomcat Native with improved OpenSSL and mavenized build

  2.0.69-150200.3.22.1 lock rpm lock src

Development Tools Module 15.5 x86_64

• Packages
  netty-tcnative
  Fork of Tomcat Native with improved OpenSSL and mavenized build

  2.0.69-150200.3.22.1 lock rpm lock src