OESA-2025-2151

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2151
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-2151.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2025-2151
Upstream
Published
2025-09-05T12:42:43Z
Modified
2025-09-05T13:18:02.442554Z
Summary
netty security update
Details

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. %package help Summary: Documents for Buildarch: noarch Requires: man info Provides: -javadoc = - Obsoletes: -javadoc < - %description help Man pages and other related documents for .

Security Fix(es):

Netty is an open-source, asynchronous event-driven network application framework. The package io.netty:netty-codec-http prior to version 4.1.77.Final contains an insufficient fix for CVE-2021-21290. When Netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. This only impacts applications running on Java version 6 and lower. Additionally, this vulnerability impacts code running on Unix-like systems, and very old versions of Mac OSX and Windows as they all share the system temporary directory between all users. Version 4.1.77.Final contains a patch for this vulnerability. As a workaround, specify one's own java.io.tmpdir when starting the JVM or use DefaultHttpDataFactory.setBaseDir(...) to set the directory to something that is only readable by the current user.(CVE-2022-24823)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS-SP4 / netty

Package

Name
netty
Purl
pkg:rpm/openEuler/netty&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.1.13-20.oe2003sp4

Ecosystem specific 

{
    "aarch64": [
        "netty-4.1.13-20.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "netty-4.1.13-20.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "netty-4.1.13-20.oe2003sp4.x86_64.rpm"
    ],
    "noarch": [
        "netty-help-4.1.13-20.oe2003sp4.noarch.rpm"
    ]
}