gpp_maybe Security update for netty

SUSE-SLE-Module-SUSE-Manager-Server-4.3-2022-3760

This update for netty fixes the following issues: - CVE-2020-11612: The ZlibDecoders allow for unbounded memory allocation while decoding a byte stream (bsc#1168932) - CVE-2021-21290: Information disclosure via the local system temporary directory (bsc#1182103) - CVE-2021-37136: Bzip2Decoder doesn't allow setting size restrictions for decompressed data (bsc#1190610) - CVE-2021-37137: Snappy frame decoder doesn't restrict the chunk length and may buffer skippable chunks (bsc#1190613)

• Release Date
  Oct 26 2022
• References
  Bugzilla: 1182103, 1190610, 1190613, 1168932
  CVEs: CVE-2021-37137, CVE-2021-37136, CVE-2021-21290, CVE-2020-11612
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Manager Server Module 4.3 s390x

• Packages
  netty
  Netty is an asynchronous event-driven Java framework

  4.1.44.Final-150400.3.3.2 lock rpm

SUSE Manager Server Module 4.3 ppc64le

• Packages
  netty
  Netty is an asynchronous event-driven Java framework

  4.1.44.Final-150400.3.3.2 lock rpm

SUSE Manager Server Module 4.3 x86_64

• Packages
  netty
  Netty is an asynchronous event-driven Java framework

  4.1.44.Final-150400.3.3.2 lock rpm lock src