Skip navigation

Netty 4.2.8.Final released

by normanmaurer
on

We are happy to announce the release of netty 4.2.8.Final. This is a bug-fix release but also contains CVE-2025-67735

The most important changes are:

  • Correct codec-native-quic Fragment-Host (#16015)
  • Fix - Http3FrameCodec decode fail during unknown settings (#15998)
  • Discard the following HttpContent for preflight request (#15941)
  • Prevent ManualEventLoop to block on a racy task submission (#15937)
  • Fix race condition in NonStickyEventExecutorGroup causing incorrect inEventLoop() result (#15933)
  • Fix 15908 - Ignore unknown Http3Setting Identifier in Http3SettingsFrame (#15909)
  • Close Channel and fail bootstrap when setting a ChannelOption causes an error (#15896)
  • Ensure Arena.ofShared() is usable before assuming that we can use Arenas on JDK25 (#15877)
  • io_uring: Fix Unix domain socket support for abstract namespace sockets (#15876)
  • Fix Zstd compression for large data (#15861)
  • Fix ZstdEncoder not producing data when source is smaller than block size (#15859)
  • Make big endian ASCII hashcode consistent with little endian (#15847)
  • Implement Quic stream reset frame application protocol error code propagation (#15845)
  • Backward Compatible - Http3SettingsFrame abstraction (#15835)
  • Fix reentrancy bug in ByteToMessageDecoder (#15833)
  • Add close tracing to retain calls (#15832)
  • Enable X25519MLKEM768 by default for BoringSSL/AWS-LC (#15830)
  • Add 32k and 64k size classes to adaptive allocator (#15799)
  • Handle invalid content length in continue request (#15794)
  • Correct HTTP/2 padding length check (#15793)
  • Make org.bouncycastle.jce.provider.BouncyCastleProvider optional by deferring initialization (#15788)
  • Expose the list of supported io_uring features (#15785)
  • IoUring: Use IORING_SETUP_CQE_MIXED by default if possible (#15780)
  • Add :protocol pseudo-header support for Extended CONNECT (RFC 9220) (#15771)
  • Prevent allocation loops when LeakPresenceDetector ResourceScope is closed (#15768)
  • Fix AutoScalingEventExecutorChooser scale down when executor is not started (#15766)
  • Add support for IP_MULTICAST_ALL to EpollDatagramChannel and IOUringDatagramChannel (netty 4.2) (#15755)

For more details please visit our bug tracker

Thank You

Every idea and bug-report counts, and so we thought it is worth mentioning those who helped in this area.

Please report an unintended omission