CLSA-2026-1793870236: TuxCare security update for io.netty (5 CVEs)

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade tuxcare/io.netty:netty-codec-http to a version that resolves this vulnerability.

   Fixed in 4.1.21.Final-tuxcare.4
2. Upgrade

   Upgrade tuxcare/io.netty:netty-codec-http2 to a version that resolves this vulnerability.

   Fixed in 4.1.21.Final-tuxcare.4
3. Upgrade

   Upgrade tuxcare/io.netty:netty-codec-redis to a version that resolves this vulnerability.

   Fixed in 4.1.21.Final-tuxcare.4
4. Upgrade

   Upgrade tuxcare/io.netty:netty-handler to a version that resolves this vulnerability.

   Fixed in 4.1.21.Final-tuxcare.4
5. Upgrade

   Upgrade io.netty to a version that resolves this vulnerability.

   Fixed in 4.1.21.Final-tuxcare.4

Event History

Child vulnerabilities

Contains the following vulnerabilities.

• CVE-2021-21295
• CVE-2021-43797
• CVE-2026-44890
• CVE-2026-50010
• CVE-2026-50020