Import Debian changes 1:4.1.7-2+deb9u5

netty (1:4.1.7-2+deb9u5) stretch-security; urgency=high
.
  * Non-maintainer upload by the ELTS team.
  * Fix CVE-2024-29025:
    Julien Viet discovered that Netty, a Java NIO client/server socket
    framework, was vulnerable to allocation of resources without limits or
    throttling due to the accumulation of data in the HttpPostRequestDecoder.
    This would allow an attacker to cause a denial of service.