Debian Netty vulnerabilities

CVE-2022-41915 [MEDIUM] CVE-2022-41915: netty - Netty project is an event-driven asynchronous network application framework. Sta... Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, when calling `DefaultHttpHeadesr.set` with an _iterator_ of values, header value validation was not performed, allowing malicious header values in the iterator to perform HTTP Response Splitting. This issue has been patched in vers

CVE-2024-29025 [MEDIUM] CVE-2024-29025: netty - Netty is an asynchronous event-driven network application framework for rapid de... Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `HttpPostRequestDecoder` can be tricked to accumulate data. While the decoder can store items on the disk if configured so, there are no limits to the number of fields the form can have, an attacher can send a chu

CVE-2021-21290 [MEDIUM] CVE-2021-21290: netty - Netty is an open-source, asynchronous event-driven network application framework... Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the