{"id":"CLSA-2026-1793349903","summary":"TuxCare security update for io.netty (24 CVEs)","details":"TuxCare rebuilt 31 io.netty packages to address 24 CVEs. Fixed in 4.1.74.Final-tuxcare.1.","modified":"2026-10-30T13:30:11.280267246Z","published":"2026-10-30T09:45:04Z","upstream":["CVE-2023-34462","CVE-2024-29025","CVE-2025-24970","CVE-2025-55163","CVE-2025-58056","CVE-2025-67735","CVE-2026-41417","CVE-2026-42578","CVE-2026-42579","CVE-2026-42583","CVE-2026-42584","CVE-2026-42585","CVE-2026-44248","CVE-2026-44249","CVE-2026-44250","CVE-2026-44893","CVE-2026-45416","CVE-2026-45536","CVE-2026-45674","CVE-2026-46340","CVE-2026-47244","CVE-2026-48006","CVE-2026-50010","CVE-2026-50560"],"affected":[{"package":{"name":"io.netty:netty-all","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-all"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json","tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"}}},{"package":{"name":"io.netty:netty-codec","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"fixed_version":"4.1.74.Final-tuxcare.1","base_version":"4.1.74.Final"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-codec-dns","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-dns"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json","tuxcare":{"fixed_version":"4.1.74.Final-tuxcare.1","base_version":"4.1.74.Final"}}},{"package":{"name":"io.netty:netty-codec-haproxy","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-haproxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json","tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"}}},{"package":{"name":"io.netty:netty-codec-http","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-http"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-codec-http2","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-http2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"fixed_version":"4.1.74.Final-tuxcare.1","base_version":"4.1.74.Final"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-codec-memcache","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-memcache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"fixed_version":"4.1.74.Final-tuxcare.1","base_version":"4.1.74.Final"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-codec-mqtt","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-mqtt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-codec-redis","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-redis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-codec-smtp","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-smtp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-codec-socks","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-socks"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json","tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"}}},{"package":{"name":"io.netty:netty-codec-stomp","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-stomp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-codec-xml","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-xml"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json","tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"}}},{"package":{"name":"io.netty:netty-example","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-example"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-handler","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-handler"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-handler-proxy","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-handler-proxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-microbench","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-microbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-resolver-dns","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-resolver-dns"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-resolver-dns-classes-macos","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-resolver-dns-classes-macos"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-resolver-dns-native-macos","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-resolver-dns-native-macos"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-testsuite","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-testsuite-autobahn","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-autobahn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-testsuite-http2","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-http2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-testsuite-native","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-native"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json","tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"}}},{"package":{"name":"io.netty:netty-testsuite-native-image","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-native-image"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json","tuxcare":{"fixed_version":"4.1.74.Final-tuxcare.1","base_version":"4.1.74.Final"}}},{"package":{"name":"io.netty:netty-testsuite-native-image-client","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-native-image-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json","tuxcare":{"fixed_version":"4.1.74.Final-tuxcare.1","base_version":"4.1.74.Final"}}},{"package":{"name":"io.netty:netty-testsuite-shading","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-shading"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"fixed_version":"4.1.74.Final-tuxcare.1","base_version":"4.1.74.Final"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-transport-blockhound-tests","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-blockhound-tests"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-transport-native-epoll","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-native-epoll"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"fixed_version":"4.1.74.Final-tuxcare.1","base_version":"4.1.74.Final"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-transport-native-kqueue","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-native-kqueue"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json"}},{"package":{"name":"io.netty:netty-transport-sctp","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-sctp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1.74.Final"},{"fixed":"4.1.74.Final-tuxcare.1"}]}],"versions":["4.1.74.Final"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793349903.json","tuxcare":{"base_version":"4.1.74.Final","fixed_version":"4.1.74.Final-tuxcare.1"}}}],"schema_version":"1.9.2"}