| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: netty-tcnative-openssl-dynamic | Distribution: openSUSE Tumbleweed |
| Version: 2.0.85 | Vendor: openSUSE |
| Release: 1.1 | Build date: Tue Nov 3 10:22:28 2026 |
| Group: Development/Libraries/Java | Build host: reproducible |
| Size: 348792 | Source RPM: netty-tcnative-2.0.85-1.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/netty/netty/wiki/Forked-Tomcat-Native | |
| Summary: Netty/TomcatNative [OpenSSL - Dynamic]] | |
A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is dynamically linked to OpenSSL and Apache APR.
Apache-2.0
* Tue Nov 03 2026 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.85 Final
* Fix out-of-bounds read in select_next_proto when no protocol
matches (#1044)
* Check for allocation failures that were previously unchecked
(#1040)
* Send unknown_ca when the chain was truncated and the
TrustManager rejected the certificate (#1038)
* Validate timeout, cache mode and cache size before narrowing
them (#1036)
* Don't sign-extend int options into the 64 bit SSL options
(#1035)
* Throw IllegalArgumentException when signing algorithm id does
not fit into 16 bits (#1034)
* Fix native memory leak in SSL_CTX_setup_certs when using
BoringSSL or AWS-LC (#1031)
* Do not discard the configured password when setCertificate(Bio)
fails without a new one (#1030)
* Throw NPE when null is passed to setSessionTicketKeys0 and
setSessionIdContext (#1028)
* Fix native memory leaks in SSLContext JNI_OnLoad (#1027)
* Fix native memory leaks in SSLContext.setPrivateKeyMethod0
(#1026)
* Fix native memory leak in SSL.parseX509Chain when the BIO is
null (#1025)
* Support SSLContext.setKeyLogCallback with OpenSSL 1.1.1+ (#1021)
* Update getSigAlgs to handle algorithms without combined NID
(#1019)
* Delete local references to Java-returned result arrays in JNI
callbacks (#1016)
* Fix infinite loop in musl_compat fallbacks on old glibc headers
(#1037)
* Preserve musl compatibility in FIPS build (#1008)
* Update to latest netty-jni-util release (#1041)
* Upgrade apr to 1.7.6 (#1032)
* Tue Sep 22 2026 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.84 Final
* Security fixes:
+ CVE-2026-116539, GHSA-gf9q-9mg7-g5qh, bsc#1289170: Heap buffer
overflow in tcn_write_to_bytebuffer BIO callback from
unhandled ring buffer write index wrap (JVM crash DoS).
+ CVE-2026-116540, GHSA-mmc8-vg2v-fvvw, bsc#1289171:
Use-after-free in ssl_tlsext_ticket_key_cb during session
ticket key rotation with OpenSSL 3.x.
+ CVE-2026-116541, GHSA-9xr3-jwv4-r489, bsc#1289172: DoS in
tcn_write_to_bytebuffer BIO write callback overreporting
consumed bytes during TLS 1.3 post-handshake flights.
+ CVE-2026-116542, GHSA-2784-hxmm-4hgf, bsc#1289173: SNI
hostname spoofing via embedded NUL bytes and overlong UTF-8
encodings in JNI NewStringUTF decoding.
* Wed Jul 15 2026 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.80 Final
* No formal changelog present
* Fri Jun 12 2026 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.79 Final
* No formal changelog present
* Fri May 15 2026 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.77 Final
* No formal changelog present
* Mon Mar 30 2026 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.75 Final
* No formal changelog present
* Needed by netty >= 4.2.11
* Thu Oct 16 2025 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.74 Final
* No formal changelog present
- Build against the netty-jni-util 0.0.10 sources
* Mon Sep 01 2025 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.73 Final
* No formal changelog present
* Mon Jun 09 2025 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.72 Final
* No formal changelog present
* Tue Feb 11 2025 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.70 Final
* No formal changelog present
* Wed Dec 04 2024 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.69 Final
* No formal changelog present
* Tue Nov 26 2024 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.68 Final
* No formal changelog present
- Build also the dynamic openssl provider and alias it to the
static openssl, libressl and boringssl ones.
* Wed Oct 30 2024 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.67 Final
* No formal changelog present
(https://github.com/netty/netty-tcnative/issues/860)
* Wed Mar 27 2024 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.65 Final
* No formal changelog present. Required by netty 4.1.108
* Thu Oct 12 2023 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.62 Final
* No formal changelog present. This artifact and netty are
closely bound
* Upgrade the netty-jni-util sources jar to version 0.0.9.Final
* Wed Sep 13 2023 Fridrich Strba <fstrba@suse.com>
- Reproducible builds: use SOURCE_DATE_EPOCH for timestamp
* Fri Jun 23 2023 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.61 Final
* Implements the SSLContext.setMaxCertList method needed by
netty 4.1.94 which contains important security updates
* No formal changelog present. This artifact and netty are
closely bound
* Thu Mar 30 2023 Fridrich Strba <fstrba@suse.com>
- Upgrade to version 2.0.59 Final
* new artifact name netty-tcnative-classes, provided by this
version is required by netty 4.1.90 which contains important
security updates
* No formal changelog present. This artifact is closely bound
to the netty releases
/usr/lib/java/netty-tcnative /usr/lib/java/netty-tcnative/netty-tcnative-linux-x86_32.jar /usr/lib/libnetty_tcnative.so /usr/share/java/netty-tcnative /usr/share/java/netty-tcnative/netty-tcnative.jar /usr/share/maven-metadata/netty-tcnative-netty-tcnative.xml /usr/share/maven-poms/netty-tcnative /usr/share/maven-poms/netty-tcnative/netty-tcnative.pom
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Nov 10 03:03:41 2026