Changelog for netty-javadoc-4.1.75-150200.4.6.2.noarch.rpm :

* Fri Apr 08 2022 fstrbaAATTsuse.com- Upgrade to latest upstream version 4.1.75- Modified patches:
* 0001-Remove-optional-dep-Blockhound.patch
* 0002-Remove-optional-dep-conscrypt.patch
* 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
* 0004-Remove-optional-dep-tcnative.patch
* 0005-Remove-optional-dep-log4j.patch
* 0006-revert-Fix-native-image-build.patch
* 0007-Revert-Support-session-cache-for-client-and-server-w.patch + rebase
* Tue Feb 22 2022 fstrbaAATTsuse.com- Do not build against the log4j12 packages
* Tue Dec 14 2021 fstrbaAATTsuse.com- Upgrade to latest upstream version 4.1.72
* fixes: bsc#1190610, CVE-2021-37136: Bzip2Decoder doesn\'t allow setting size restrictions for decompressed data
* fixes: bsc#1190613, CVE-2021-37137: SnappyFrameDecoder doesn\'t restrict chunk length any may buffer skippable chunks in an unnecessary way
* fixes: bsc#1193672, CVE-2021-43797: possible HTTP request smuggling due to insufficient validation against control characters- Modified patches:
* 0001-Remove-optional-dep-Blockhound.patch
* 0002-Remove-optional-dep-conscrypt.patch
* 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
* 0004-Remove-optional-dep-tcnative.patch
* 0005-Remove-optional-dep-log4j.patch
* 0006-revert-Fix-native-image-build.patch
* 0007-Revert-Support-session-cache-for-client-and-server-w.patch
* no-werror.patch + rediff to changed context- Added patch:
* no-brotli-zstd.patch + disable Brotli and Zstd compression, since we lack the dependencies needed to build them
* Fri Mar 12 2021 fstrbaAATTsuse.com- Upgrade to latest upstream version 4.1.60
* fixes: bsc#1183262, CVE-2021-21295: HTTP/2 request Content-Length header field is not validated by \'Http2MultiplexHandler\'- Modified patches:
* 0001-Remove-optional-dep-Blockhound.patch
* 0002-Remove-optional-dep-conscrypt.patch
* 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
* 0004-Remove-optional-dep-tcnative.patch
* 0005-Remove-optional-dep-log4j.patch
* 0006-revert-Fix-native-image-build.patch + rediff to changed context- Added patch:
* 0007-Revert-Support-session-cache-for-client-and-server-w.patch + revert optional disabled cache implementation that conflicts with our 0004-Remove-optional-dep-tcnative.patch
* Thu Feb 11 2021 fstrbaAATTsuse.com- Upgrade to latest upstream version 4.1.59- Removed patches:
* netty-CVE-2020-11612.patch
* netty-CVE-2021-21290.patch + fixes integrated in the upstream sources
* 0001-Remove-OpenSSL-parts-depending-on-tcnative.patch
* 0002-Remove-NPN.patch
* 0003-Remove-conscrypt-ALPN.patch
* 0004-Remove-jetty-ALPN.patch + replaced by new patches- Added patches:
* 0001-Remove-optional-dep-Blockhound.patch
* 0002-Remove-optional-dep-conscrypt.patch
* 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
* 0004-Remove-optional-dep-tcnative.patch
* 0005-Remove-optional-dep-log4j.patch + remove various optional dependencies that we do not need
* 0006-revert-Fix-native-image-build.patch + Revert changes that introduce a new dependency that we do not have
* no-werror.patch + Do not treat warnings as errors- Build -poms and -javadoc as noarch packages, since they do not install anything in arch-dependent directories
* Thu Feb 11 2021 fstrbaAATTsuse.com- Added patch:
* netty-CVE-2021-21290.patch + bsc#1182103, CVE-2021-21290
* Thu Apr 09 2020 fstrbaAATTsuse.com- Added patch:
* netty-CVE-2020-11612.patch + bsc#1168932, CVE-2020-11612 + bsc#1169082, CVE-2020-10707
* Thu Jan 09 2020 fstrbaAATTsuse.com- Split pom-only artifacts into a subpackage netty-pom in order to generate their dependencies correctly
* Wed Nov 13 2019 fstrbaAATTsuse.com- Initial packaging of netty 4.1.13