diff -Nru netty-4.1.45/debian/changelog netty-4.1.45/debian/changelog --- netty-4.1.45/debian/changelog 2024-02-28 14:55:31.000000000 +0000 +++ netty-4.1.45/debian/changelog 2024-02-28 14:55:31.000000000 +0000 @@ -1,9 +1,12 @@ -netty (1:4.1.45-1ubuntu0.1) focal-security; urgency=medium +netty (1:4.1.45-1ubuntu0.2) focal-security; urgency=medium * SECURITY UPDATE: Uncontrolled Resource Consumption - debian/patches/CVE-2023-44487.patch: HTTP/2 Rapid Reset Attack - DDoS vector in the HTTP/2 protocol due RST frames. - CVE-2023-44487 + * Other fixes: + - debian/patches/21-java-17.patch: Function was removed in JDK15 and + later. -- Paulo Flabiano Smorigo Wed, 28 Feb 2024 11:55:31 -0300 diff -Nru netty-4.1.45/debian/patches/21-java-17.patch netty-4.1.45/debian/patches/21-java-17.patch --- netty-4.1.45/debian/patches/21-java-17.patch 1970-01-01 00:00:00.000000000 +0000 +++ netty-4.1.45/debian/patches/21-java-17.patch 2024-02-28 14:55:31.000000000 +0000 @@ -0,0 +1,17 @@ +Description: compile with JDK 17 +Source: https://github.com/netty/netty/commit/bb184794341255cf02f9b7156c5ad828b172fdab.patch +Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1011135 +Comment: No longer needed after updating upstream to 4.1.52 or later + +--- netty-4.1.45.orig/handler/src/main/java/io/netty/handler/ssl/util/OpenJdkSelfSignedCertGenerator.java ++++ netty-4.1.45/handler/src/main/java/io/netty/handler/ssl/util/OpenJdkSelfSignedCertGenerator.java +@@ -66,7 +66,8 @@ final class OpenJdkSelfSignedCertGenerat + info.set(X509CertInfo.VALIDITY, new CertificateValidity(notBefore, notAfter)); + info.set(X509CertInfo.KEY, new CertificateX509Key(keypair.getPublic())); + info.set(X509CertInfo.ALGORITHM_ID, +- new CertificateAlgorithmId(new AlgorithmId(AlgorithmId.sha256WithRSAEncryption_oid))); ++ // sha256WithRSAEncryption ++ new CertificateAlgorithmId(AlgorithmId.get("1.2.840.113549.1.1.11"))); + + // Sign the cert to identify the algorithm that's used. + X509CertImpl cert = new X509CertImpl(info); diff -Nru netty-4.1.45/debian/patches/series netty-4.1.45/debian/patches/series --- netty-4.1.45/debian/patches/series 2024-02-28 14:55:31.000000000 +0000 +++ netty-4.1.45/debian/patches/series 2024-02-28 14:55:31.000000000 +0000 @@ -13,3 +13,4 @@ 16-disable-substratevm-support.patch 17-disable-blockhound-integration.patch CVE-2023-44487.patch +21-java-17.patch