Skip to content

Bump netty to 4.2.17.Final - #1874

Open
Potothingi wants to merge 1 commit into
PaperMC:dev/4.0.0from
Potothingi:dev/4.0.0
Open

Bump netty to 4.2.17.Final#1874
Potothingi wants to merge 1 commit into
PaperMC:dev/4.0.0from
Potothingi:dev/4.0.0

Conversation

@Potothingi

Copy link
Copy Markdown

📝 Description

This PR upgrades Netty from 4.2.16.Final to 4.2.17.Final.
This is a highly recommended security and bug-fix release by the upstream maintainers.

🚀 Key Highlights for Velocity

  • Security Fixes: Patches multiple CVEs, including algorithm inefficiency in netty-handler and memory exhaustion vulnerabilities, protecting the server from potential network-based attacks.
  • Stability & Performance:
    • Fixes a critical direct memory OOM (Out of Memory) issue on low-core containers.
    • Resolves buffer leaks in SslHandler and classloader leaks via GlobalEventExecutor.
  • Network & Compression: Fixes an issue where JdkZlibDecompressor could lose the tail of highly compressible streams, which is crucial for reliable packet handling.

🔗 Related Links

@electronicboy

Copy link
Copy Markdown
Member

Key Highlights for Velocity

The majority of those are literally irrelevant to us, the only strong argument for merging this is maintanance, please do not fire your AI at us without actually validating it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants