Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package netty for openSUSE:Factory checked in at 2024-12-05 17:10:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/netty (Old) and /work/SRC/openSUSE:Factory/.netty.new.28523 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "netty" Thu Dec 5 17:10:13 2024 rev:3 rq:1228513 version:4.1.115 Changes: -------- --- /work/SRC/openSUSE:Factory/netty/netty.changes 2024-11-28 22:43:32.635945326 +0100 +++ /work/SRC/openSUSE:Factory/.netty.new.28523/netty.changes 2024-12-05 17:13:52.102732462 +0100 @@ -1,0 +2,34 @@ +Thu Dec 5 12:48:41 UTC 2024 - Fridrich Strba <fst...@suse.com> + +- Upgrade to upstream version 4.1.115 + * Fixes: + + Allow MessageToMessageDecoder to take care of reading more + data when needed + + Fix SSL session resumption with ClientAuth.OPTIONAL and add + tests with session tickets + + Fix incorrect cast in NioDomainSocketChannel.parent() + + Fix bug where SslHandler may stall after TLSv1.3 handshake + with delegate tasks + + AdaptiveByteBufAllocator: Make pooling of AdaptiveByteBuf + magazine local + + Specialize Adaptive's allocator Recycler based on magazine's + owner + + Fix epoll_wait retry loop + + Log / include the correct error during handshake failure + + Convey autoAckPing in http2 decoder constructor chain + + Allow to set used named groups per OpenSslContext + + Verify default named groups before using them with native SSL + implementation + + Include details on why it was not possible to configure + accepted issuers in the SSLException + + Correctly detect if KeyManager is not supported by OpenSSL + version + + Preserve ordering of default named groups during conversation + + Denial of Service attack on windows app using netty + (bsc#1233297, CVE-2024-47535) +- Split the netty-poms package in netty-parent and netty-bom +- Modified patch: + * 0001-Remove-optional-dep-Blockhound.patch + + rediff + +------------------------------------------------------------------- Old: ---- netty-4.1.114.Final.tar.gz New: ---- netty-4.1.115.Final.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ netty.spec ++++++ --- /var/tmp/diff_new_pack.3h0mV9/_old 2024-12-05 17:13:52.738759125 +0100 +++ /var/tmp/diff_new_pack.3h0mV9/_new 2024-12-05 17:13:52.742759293 +0100 @@ -19,7 +19,7 @@ %global namedreltag .Final %global namedversion %{version}%{?namedreltag} Name: netty -Version: 4.1.114 +Version: 4.1.115 Release: 0 Summary: An asynchronous event-driven network application framework and tools for Java License: Apache-2.0 @@ -63,7 +63,7 @@ BuildRequires: mvn(org.codehaus.mojo:exec-maven-plugin) BuildRequires: mvn(org.codehaus.mojo:flatten-maven-plugin) BuildRequires: mvn(org.fusesource.hawtjni:hawtjni-maven-plugin) -BuildRequires: mvn(org.jctools:jctools-core) +BuildRequires: mvn(org.jctools:jctools-core) >= 4 BuildRequires: mvn(org.slf4j:slf4j-api) %description @@ -80,10 +80,20 @@ a way to achieve ease of development, performance, stability, and flexibility without a compromise. -%package poms +%package bom Summary: POM-only artifacts for %{name} +Obsoletes: %{name}-poms +BuildArch: noarch + +%description bom +%{summary}. + +%package parent +Summary: POM-only artifacts for %{name} +Obsoletes: %{name}-poms +BuildArch: noarch -%description poms +%description parent %{summary}. %package javadoc @@ -220,28 +230,13 @@ %pom_remove_dep -r :annotations-java5 -%pom_xpath_remove -r "pom:dependency[pom:classifier='linux-x86_64-fedora']" -%pom_xpath_remove -r "pom:dependency[pom:classifier='linux-aarch_64-fedora']" -%pom_xpath_remove -r "pom:dependency[pom:classifier='osx-x86_64']" -%pom_xpath_remove -r "pom:dependency[pom:classifier='osx-aarch_64']" -%pom_xpath_remove -r "pom:dependency[pom:classifier='windows-x86_64']" -%ifnarch aarch64 -%pom_xpath_remove -r "pom:dependency[pom:classifier='linux-aarch_64']" -%endif -%ifnarch x86_64 -%pom_xpath_remove -r "pom:dependency[pom:classifier='linux-x86_64']" -%endif -%ifnarch riscv64 -%pom_xpath_remove -r "pom:dependency[pom:classifier='linux-riscv64']" -%endif - # Tell xmvn to install attached artifact, which it does not # do by default. In this case install all attached artifacts with # the linux classifier. %{mvn_package} ":::linux*:" -%{mvn_package} ":netty-parent" poms -%{mvn_package} ":netty-bom" poms +%{mvn_package} ":netty-parent" parent +%{mvn_package} ":netty-bom" bom %{mvn_package} ':*-tests' __noinstall @@ -258,9 +253,11 @@ %files -f .mfiles %license LICENSE.txt NOTICE.txt -%files poms -f .mfiles-poms +%files parent -f .mfiles-parent %license LICENSE.txt NOTICE.txt +%files bom -f .mfiles-bom + %files javadoc -f .mfiles-javadoc %license LICENSE.txt NOTICE.txt ++++++ 0001-Remove-optional-dep-Blockhound.patch ++++++ --- /var/tmp/diff_new_pack.3h0mV9/_old 2024-12-05 17:13:52.766760299 +0100 +++ /var/tmp/diff_new_pack.3h0mV9/_new 2024-12-05 17:13:52.770760467 +0100 @@ -309,7 +309,7 @@ - <parent> - <groupId>io.netty</groupId> - <artifactId>netty-parent</artifactId> -- <version>4.1.114.Final</version> +- <version>4.1.115.Final</version> - </parent> - - <artifactId>netty-transport-blockhound-tests</artifactId> ++++++ netty-4.1.114.Final.tar.gz -> netty-4.1.115.Final.tar.gz ++++++ ++++ 3205 lines of diff (skipped)