ALT-PU-2016-3291: package netty update to version 4.0.28-alt1_2jpp8
Описание
This update upgrades netty to version 4.0.28-alt1_2jpp8.
Устраненные уязвимости3
Ссылки4
GHSA-7vpq-g998-qpv7
https://github.com/advisories/GHSA-7vpq-g998-qpv7GHSA-9959-6p3m-wxpc
https://github.com/advisories/GHSA-9959-6p3m-wxpcGHSA-xfv3-rrfm-f2rv
https://github.com/advisories/GHSA-xfv3-rrfm-f2rvСвязанные уязвимости
WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.
WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.
WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames.
WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7. ...
