Format: 1.8 Date: Wed, 28 Feb 2024 11:43:08 -0300 Source: netty Built-For-Profiles: noudeb Architecture: source Version: 1:4.1.48-7ubuntu0.1 Distribution: mantic-security Urgency: medium Maintainer: Ubuntu Developers Changed-By: Paulo Flabiano Smorigo Changes: netty (1:4.1.48-7ubuntu0.1) mantic-security; urgency=medium . * SECURITY UPDATE: Uncontrolled Resource Consumption - debian/patches/CVE-2023-34462.patch: netty-handler SniHandler 16MB allocation. - debian/patches/CVE-2023-44487.patch: HTTP/2 Rapid Reset Attack - DDoS vector in the HTTP/2 protocol due RST frames. - CVE-2023-34462 - CVE-2023-44487 Checksums-Sha1: c33408926686c391c6988f06cded94611efb14dc 2566 netty_4.1.48-7ubuntu0.1.dsc cd6c60529d29ce6e308c0fcfd27c560bcbed8073 37288 netty_4.1.48-7ubuntu0.1.debian.tar.xz 36bd3084f3ab60d288bf0acce955ddbaab6488dc 16389 netty_4.1.48-7ubuntu0.1_source.buildinfo Checksums-Sha256: 2048db7063e336d6ca841b312a2d137a85d16f4493b37d6f3a2a8f0c941e0727 2566 netty_4.1.48-7ubuntu0.1.dsc 1cc1abacf3664396dc9ce514767a1d6cded96f49c8fb7f28abacf3be132bc026 37288 netty_4.1.48-7ubuntu0.1.debian.tar.xz 379fa46c75afb3fe5d2e8d84cfd84d1ec58a82f3f8a8bc603c4dc19bca2e1064 16389 netty_4.1.48-7ubuntu0.1_source.buildinfo Files: bb1fb16db5aa4fea0478d8e748744d51 2566 java optional netty_4.1.48-7ubuntu0.1.dsc fd1bd316996708ca3d396f8a7a908311 37288 java optional netty_4.1.48-7ubuntu0.1.debian.tar.xz 76befa1f952c999b263b7bee817e2a12 16389 java optional netty_4.1.48-7ubuntu0.1_source.buildinfo Original-Maintainer: Debian Java Maintainers