Skip navigation

Netty 4.1.137.Final released

by normanmaurer
on

We are happy to announce the release of netty 4.1.137.Final. This is a bug-fix and security release.

We strongly recommend upgrading to this version to get the following security fixes:

Other significant changes are:

  • Auto-port 4.1: AsciiString.cached(String) should sanitize the provided String (#13749) by @netty-project-bot in https://github.com/netty/netty/pull/17069
  • AsciiString.cached(String) should sanitize the provided String (#13749) (#17007) by @normanmaurer in https://github.com/netty/netty/pull/17075
  • Fix AsciiString.cached(String) performance regression (#17074) by @normanmaurer in https://github.com/netty/netty/pull/17080
  • Auto-port 4.1: SslHandler: Fix possible buffer leak when an OOME is thrown during allocation by @netty-project-bot in https://github.com/netty/netty/pull/17078
  • Fix AsciiString.cached(String) performance regression (#17074) by @normanmaurer in https://github.com/netty/netty/pull/17083
  • Auto-port 4.1: Add HttpContentCompressor constructor with ability to specify desired maxPipelineDepth by @netty-project-bot in https://github.com/netty/netty/pull/17085
  • Auto-port 4.1: Fix AdaptiveByteBuf._setLongLE calling checked setLongLE by @netty-project-bot in https://github.com/netty/netty/pull/17102
  • Auto-port 4.1: Reject negative maxOrder in PooledByteBufAllocator by @netty-project-bot in https://github.com/netty/netty/pull/17095
  • Auto-port 4.1: Snappy: Guard decoder against invalid chunk lengths by @netty-project-bot in https://github.com/netty/netty/pull/17110
  • Backport #16079 and #17114 by @hyperxpro in https://github.com/netty/netty/pull/17134
  • Auto-port 4.1: Use safe decompressor in Lz4FrameDecoder by @netty-project-bot in https://github.com/netty/netty/pull/17121
  • Auto-port 4.1: Configure TestLens for the PR builds by @netty-project-bot in https://github.com/netty/netty/pull/17133
  • Fix maxAllocation for brotli-encoded content in HttpContentDecompress… by @chrisvest in https://github.com/netty/netty/pull/17124
  • Propagate the CI envionment variables through to the docker builds (#… by @chrisvest in https://github.com/netty/netty/pull/17143
  • Auto-port 4.1: fix(mqtt): drop UNSUBACK reason codes for MQTT 3.x encoding by @netty-project-bot in https://github.com/netty/netty/pull/17137
  • Fix buddy cache evicting chunks with live buffers (#17154) by @franz1981 in https://github.com/netty/netty/pull/17176
  • Auto-port 4.1: Avoid classloader leak via GlobalEventExecutor terminationFuture failure by @netty-project-bot in https://github.com/netty/netty/pull/17189
  • Auto-port 4.1: HttpObjectEncoder / DefaultHttp2FrameWriter: fix buffer leak when a Throwable is thrown during header encoding by @netty-project-bot in https://github.com/netty/netty/pull/17178
  • BrotliEncoder: Prevent duplicate close scheduling (#17175) by @normanmaurer in https://github.com/netty/netty/pull/17193
  • Auto-port 4.1: Update compress-lzf to 1.2.1 by @netty-project-bot in https://github.com/netty/netty/pull/17197
  • Do not write WebSocket handshake response to the tail of the pipeline (#17192) by @normanmaurer in https://github.com/netty/netty/pull/17200
  • HttpServerCodec: do not consume the method queue for 1xx interim responses (#17182) by @normanmaurer in https://github.com/netty/netty/pull/17203
  • Adaptive allocator backports by @chrisvest in https://github.com/netty/netty/pull/17206
  • Weakly reference engines from the OpenSSL engine map (#17199) by @chrisvest in https://github.com/netty/netty/pull/17205
  • Auto-port 4.1: Add .editorconfig to enforce consistent coding style by @netty-project-bot in https://github.com/netty/netty/pull/17209
  • Update surefire plugin to latest version (#17210) by @normanmaurer in https://github.com/netty/netty/pull/17212
  • Update to latest netty-tcnative release (#17056) by @chrisvest in https://github.com/netty/netty/pull/17122
  • Merge changes from forks (#17213) by @normanmaurer in https://github.com/netty/netty/pull/17217

For more details please see the complete release notes.

Thank You

Every idea and bug-report counts, and so we thought it is worth mentioning those who helped in this area.

Please report an unintended omission.