CLSA-2026-1793871180: TuxCare security update for io.netty (4 CVEs)
Published Nov 5, 2026
·Updated
TuxCare rebuilt 4 io.netty packages to address 4 CVEs. Fixed in 4.1.29.Final-tuxcare.5.
Affected Software
4 affected componentsFixes available
tuxcare/io.netty:netty-codec>=4.1.29.Final<4.1.29.Final-tuxcare.5
4.1.29.Final-tuxcare.5
tuxcare/io.netty:netty-codec-http2>=4.1.29.Final<4.1.29.Final-tuxcare.5
4.1.29.Final-tuxcare.5
tuxcare/io.netty:netty-codec-smtp>=4.1.29.Final<4.1.29.Final-tuxcare.5
4.1.29.Final-tuxcare.5
tuxcare/io.netty:netty-handler>=4.1.29.Final<4.1.29.Final-tuxcare.5
4.1.29.Final-tuxcare.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/io.netty:netty-codecto a version that resolves this vulnerability.Fixed in 4.1.29.Final-tuxcare.5 - Upgrade
Upgrade
tuxcare/io.netty:netty-codec-http2to a version that resolves this vulnerability.Fixed in 4.1.29.Final-tuxcare.5 - Upgrade
Upgrade
tuxcare/io.netty:netty-codec-smtpto a version that resolves this vulnerability.Fixed in 4.1.29.Final-tuxcare.5 - Upgrade
Upgrade
tuxcare/io.netty:netty-handlerto a version that resolves this vulnerability.Fixed in 4.1.29.Final-tuxcare.5 - Upgrade
Upgrade
io.nettyto a version that resolves this vulnerability.Fixed in 4.1.29.Final-tuxcare.5
Event History
Nov 5, 2026
Advisory Published
via OSV·10:33 AM
Data Sourced
via OSV·10:33 AM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.