advisories/23974.adv

type: security
subject: Updated netty & jctools packages fix security vulnerability
CVE:
 - CVE-2016-4970
src:
  6:
   core:
     - netty-4.0.42-1.mga6
     - jctools-1.2.1-1.mga6
description: |
  handler/ssl/OpenSslEngine.java in Netty before 4.0.37.Final allows remote
  attackers to cause a denial of service (infinite loop) (CVE-2016-4970).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=23974
 - https://nvd.nist.gov/vuln/detail/CVE-2016-4970
ID: MGASA-2018-0485
1	type: security
2	subject: Updated netty & jctools packages fix security vulnerability
3	CVE:
4	- CVE-2016-4970
5	src:
6	6:
7	core:
8	- netty-4.0.42-1.mga6
9	- jctools-1.2.1-1.mga6
10	description: \|
11	handler/ssl/OpenSslEngine.java in Netty before 4.0.37.Final allows remote
12	attackers to cause a denial of service (infinite loop) (CVE-2016-4970).
13	references:
14	- https://bugs.mageia.org/show_bug.cgi?id=23974
15	- https://nvd.nist.gov/vuln/detail/CVE-2016-4970
16	ID: MGASA-2018-0485