Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package netty for openSUSE:Factory checked in at 2026-03-30 18:33:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/netty (Old) and /work/SRC/openSUSE:Factory/.netty.new.1999 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "netty" Mon Mar 30 18:33:22 2026 rev:13 rq:1343668 version:4.1.132 Changes: -------- --- /work/SRC/openSUSE:Factory/netty/netty.changes 2026-03-13 21:22:22.851147330 +0100 +++ /work/SRC/openSUSE:Factory/.netty.new.1999/netty.changes 2026-03-30 18:37:57.003739693 +0200 @@ -1,0 +2,48 @@ +Mon Mar 30 12:01:10 UTC 2026 - Fridrich Strba <[email protected]> + +- Upgrade to upstream version 4.1.132 + * Fixes: + + Fix Incorrect nanos-to-millis conversion in epoll_wait EINTR + retry loop + + Make RefCntOpenSslContext.deallocate more robust + + HTTP2: Correctly account for padding when decompress + + Fix high-order bit aliasing in HttpUtil.validateToken + + fix: the precedence of + is higher than >> + + AdaptiveByteBufAllocator: make sure byteBuf.capacity() not + greater than byteBuf.maxCapacity() + + AdaptivePoolingAllocator: call unreserveMatchingBuddy(...) + if byteBuf initialization failed + + Don't assume CertificateFactory is thread-safe + + Fix HttpObjectAggregator leaving connection stuck after 413 + with AUTO_READ=false + + HTTP2: Ensure preface is flushed in all cases + + Fix UnsupportedOperationException in readTrailingHeaders + + Fix client_max_window_bits parameter handling in + permessage-deflate extension + + Native transports: Fix possible fd leak when fcntl fails. + + Kqueue: Fix undefined behaviour when GetStringUTFChars fails + and SO_ACCEPTFILTER is supported + + Kqueue: Possible overflow when using + netty_kqueue_bsdsocket_setAcceptFilter(...) + + Native transports: Fix undefined behaviour when + GetStringUTFChars fails while open FD + + Epoll: Add null checks for safety reasons + + Epoll: Use correct value to initialize mmsghdr.msg_namelen + + Epoll: Fix support for IP_RECVORIGDSTADDR + + AdaptivePoolingAllocator: remove ensureAccessible() call in + capacity(int) method + + Epoll: setTcpMg5Sig(...) might overflow + + JdkZlibDecoder: accumulate decompressed output before firing + channelRead + + Limit the number of Continuation frames per HTTP2 Headers + (bsc#1261043, CVE-2026-33871) + + Stricter HTTP/1.1 chunk extension parsing (bsc#1261031, + CVE-2026-33870) +- Modified patches: + * 0001-Remove-optional-dep-Blockhound.patch + * 0002-Remove-optional-dep-conscrypt.patch + * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch + * 0004-Disable-Brotli-and-ZStd-compression.patch + + rediff + +------------------------------------------------------------------- Old: ---- netty-4.1.131.Final.tar.gz New: ---- netty-4.1.132.Final.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ netty.spec ++++++ --- /var/tmp/diff_new_pack.jyyzbB/_old 2026-03-30 18:37:58.207789973 +0200 +++ /var/tmp/diff_new_pack.jyyzbB/_new 2026-03-30 18:37:58.207789973 +0200 @@ -19,7 +19,7 @@ %global namedreltag .Final %global namedversion %{version}%{?namedreltag} Name: netty -Version: 4.1.131 +Version: 4.1.132 Release: 0 Summary: An asynchronous event-driven network application framework and tools for Java License: Apache-2.0 @@ -48,8 +48,8 @@ BuildRequires: mvn(com.fasterxml:aalto-xml) BuildRequires: mvn(com.jcraft:jzlib) BuildRequires: mvn(commons-logging:commons-logging) -BuildRequires: mvn(io.netty:netty-tcnative) >= 2.0.60 -BuildRequires: mvn(io.netty:netty-tcnative-classes) >= 2.0.60 +BuildRequires: mvn(io.netty:netty-tcnative) >= 2.0.75 +BuildRequires: mvn(io.netty:netty-tcnative-classes) >= 2.0.75 BuildRequires: mvn(kr.motd.maven:os-maven-plugin) BuildRequires: mvn(org.apache.felix:maven-bundle-plugin) BuildRequires: mvn(org.apache.logging.log4j:log4j-1.2-api) ++++++ 0001-Remove-optional-dep-Blockhound.patch ++++++ --- /var/tmp/diff_new_pack.jyyzbB/_old 2026-03-30 18:37:58.263792311 +0200 +++ /var/tmp/diff_new_pack.jyyzbB/_new 2026-03-30 18:37:58.275792812 +0200 @@ -1,4 +1,4 @@ -From 0cd1cee884653902d23d36a0190a90b2e2364329 Mon Sep 17 00:00:00 2001 +From 9d0068f1c06538bf1dc550410fc935529903fcab Mon Sep 17 00:00:00 2001 From: Mat Booth <[email protected]> Date: Mon, 7 Sep 2020 12:17:31 +0100 Subject: [PATCH 1/4] Remove optional dep Blockhound @@ -23,7 +23,7 @@ delete mode 100644 transport-blockhound-tests/src/test/resources/io/netty/util/internal/mutual_auth_ca.pem diff --git a/common/pom.xml b/common/pom.xml -index 4664f8f813..b1081b1d08 100644 +index fd6df47e93..260628c2e2 100644 --- a/common/pom.xml +++ b/common/pom.xml @@ -89,11 +89,6 @@ @@ -266,7 +266,7 @@ -io.netty.util.internal.Hidden$NettyBlockHoundIntegration \ No newline at end of file diff --git a/pom.xml b/pom.xml -index 8e711a4cdb..7cc071371d 100644 +index 802c51e149..1861ad1d25 100644 --- a/pom.xml +++ b/pom.xml @@ -905,7 +905,6 @@ @@ -293,7 +293,7 @@ diff --git a/transport-blockhound-tests/pom.xml b/transport-blockhound-tests/pom.xml deleted file mode 100644 -index ad874197f0..0000000000 +index 6e6ba5c53e..0000000000 --- a/transport-blockhound-tests/pom.xml +++ /dev/null @@ -1,228 +0,0 @@ @@ -319,7 +319,7 @@ - <parent> - <groupId>io.netty</groupId> - <artifactId>netty-parent</artifactId> -- <version>4.1.131.Final</version> +- <version>4.1.132.Final</version> - </parent> - - <artifactId>netty-transport-blockhound-tests</artifactId> ++++++ 0002-Remove-optional-dep-conscrypt.patch ++++++ --- /var/tmp/diff_new_pack.jyyzbB/_old 2026-03-30 18:37:58.315794483 +0200 +++ /var/tmp/diff_new_pack.jyyzbB/_new 2026-03-30 18:37:58.335795318 +0200 @@ -1,4 +1,4 @@ -From 8df29a5bbf89305b6714fcc8ba3b3e8eb08e099a Mon Sep 17 00:00:00 2001 +From 2fa94827d28df5fdcee6f4b95d6c407423897ca1 Mon Sep 17 00:00:00 2001 From: Mat Booth <[email protected]> Date: Mon, 7 Sep 2020 13:24:30 +0100 Subject: [PATCH 2/4] Remove optional dep conscrypt @@ -15,7 +15,7 @@ delete mode 100644 handler/src/main/java/io/netty/handler/ssl/ConscryptAlpnSslEngine.java diff --git a/handler/pom.xml b/handler/pom.xml -index c961086be2..47538963b3 100644 +index ab85c94ba4..84309b4220 100644 --- a/handler/pom.xml +++ b/handler/pom.xml @@ -96,12 +96,6 @@ @@ -434,7 +434,7 @@ SslEngineType(boolean wantsDirectBuffer, Cumulator cumulator) { diff --git a/pom.xml b/pom.xml -index 7cc071371d..6280e71fda 100644 +index 1861ad1d25..7f4bc213a1 100644 --- a/pom.xml +++ b/pom.xml @@ -984,16 +984,6 @@ ++++++ 0003-Remove-optional-deps-jetty-alpn-and-npn.patch ++++++ --- /var/tmp/diff_new_pack.jyyzbB/_old 2026-03-30 18:37:58.371796821 +0200 +++ /var/tmp/diff_new_pack.jyyzbB/_new 2026-03-30 18:37:58.387797489 +0200 @@ -1,4 +1,4 @@ -From ee94cacd5639220e530ce9285dc6c88473d027f9 Mon Sep 17 00:00:00 2001 +From 4bcfb83cf14659bf0125cc5dd43578a2b6b20dfb Mon Sep 17 00:00:00 2001 From: Mat Booth <[email protected]> Date: Mon, 7 Sep 2020 13:26:20 +0100 Subject: [PATCH 3/4] Remove optional deps jetty alpn and npn @@ -15,7 +15,7 @@ delete mode 100644 handler/src/main/java/io/netty/handler/ssl/JettyNpnSslEngine.java diff --git a/handler/pom.xml b/handler/pom.xml -index 47538963b3..ae21ff4df2 100644 +index 84309b4220..3df96e9d12 100644 --- a/handler/pom.xml +++ b/handler/pom.xml @@ -86,16 +86,6 @@ @@ -374,7 +374,7 @@ - } -} diff --git a/pom.xml b/pom.xml -index 6280e71fda..365fa525d7 100644 +index 7f4bc213a1..253be4da8d 100644 --- a/pom.xml +++ b/pom.xml @@ -941,20 +941,6 @@ ++++++ 0004-Disable-Brotli-and-ZStd-compression.patch ++++++ --- /var/tmp/diff_new_pack.jyyzbB/_old 2026-03-30 18:37:58.415798659 +0200 +++ /var/tmp/diff_new_pack.jyyzbB/_new 2026-03-30 18:37:58.419798826 +0200 @@ -1,4 +1,4 @@ -From 96dec85327b3309c7fcc0d77376ef12415bffa34 Mon Sep 17 00:00:00 2001 +From 2b8eb312dc9076d8dc1b48761a05cfd92a95c56d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fridrich=20=C5=A0trba?= <[email protected]> Date: Thu, 30 Mar 2023 13:19:04 +0200 Subject: [PATCH 4/4] Disable Brotli and ZStd compression @@ -333,7 +333,7 @@ return new EmbeddedChannel(ctx.channel().id(), ctx.channel().metadata().hasDisconnect(), ctx.channel().config(), new SnappyFrameEncoder()); diff --git a/codec-http2/src/main/java/io/netty/handler/codec/http2/DelegatingDecompressorFrameListener.java b/codec-http2/src/main/java/io/netty/handler/codec/http2/DelegatingDecompressorFrameListener.java -index 73e497ccb8..085ba2bc73 100644 +index 0587cf49c1..680ec07c12 100644 --- a/codec-http2/src/main/java/io/netty/handler/codec/http2/DelegatingDecompressorFrameListener.java +++ b/codec-http2/src/main/java/io/netty/handler/codec/http2/DelegatingDecompressorFrameListener.java @@ -20,24 +20,18 @@ import io.netty.channel.ChannelHandlerContext; ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.jyyzbB/_old 2026-03-30 18:37:58.451800162 +0200 +++ /var/tmp/diff_new_pack.jyyzbB/_new 2026-03-30 18:37:58.479801331 +0200 @@ -1,6 +1,6 @@ -mtime: 1773408804 -commit: efb3440ee0e76243becacb9f6ac9c1d1f348ab86439f85132c6fd022909d2d33 +mtime: 1774875540 +commit: d6c364f7e6bbf7dbbb8d48be78e93983e53f133c580cae58bf5608bd61ba303e url: https://src.opensuse.org/java-packages/netty.git -revision: efb3440ee0e76243becacb9f6ac9c1d1f348ab86439f85132c6fd022909d2d33 +revision: d6c364f7e6bbf7dbbb8d48be78e93983e53f133c580cae58bf5608bd61ba303e projectscmsync: https://src.opensuse.org/java-packages/_ObsPrj ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-03-30 14:59:32.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ netty-4.1.131.Final.tar.gz -> netty-4.1.132.Final.tar.gz ++++++ ++++ 4814 lines of diff (skipped)
