CLSA-2026-1794160114: TuxCare security update for io.netty (31 CVEs)
TuxCare rebuilt 11 io.netty packages to address 31 CVEs. Fixed in 4.1.46.Final-tuxcare.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/io.netty:netty-codecto a version that resolves this vulnerability.Fixed in 4.1.46.Final-tuxcare.1 - Upgrade
Upgrade
tuxcare/io.netty:netty-codec-dnsto a version that resolves this vulnerability.Fixed in 4.1.46.Final-tuxcare.1 - Upgrade
Upgrade
tuxcare/io.netty:netty-codec-haproxyto a version that resolves this vulnerability.Fixed in 4.1.46.Final-tuxcare.1 - Upgrade
Upgrade
tuxcare/io.netty:netty-codec-httpto a version that resolves this vulnerability.Fixed in 4.1.46.Final-tuxcare.1 - Upgrade
Upgrade
tuxcare/io.netty:netty-codec-http2to a version that resolves this vulnerability.Fixed in 4.1.46.Final-tuxcare.1 - Upgrade
Upgrade
tuxcare/io.netty:netty-codec-redisto a version that resolves this vulnerability.Fixed in 4.1.46.Final-tuxcare.1 - Upgrade
Upgrade
tuxcare/io.netty:netty-codec-smtpto a version that resolves this vulnerability.Fixed in 4.1.46.Final-tuxcare.1 - Upgrade
Upgrade
tuxcare/io.netty:netty-commonto a version that resolves this vulnerability.Fixed in 4.1.46.Final-tuxcare.1 - Upgrade
Upgrade
tuxcare/io.netty:netty-handlerto a version that resolves this vulnerability.Fixed in 4.1.46.Final-tuxcare.1 - Upgrade
Upgrade
tuxcare/io.netty:netty-resolver-dnsto a version that resolves this vulnerability.Fixed in 4.1.46.Final-tuxcare.1 - Upgrade
Upgrade
tuxcare/io.netty:netty-transport-sctpto a version that resolves this vulnerability.Fixed in 4.1.46.Final-tuxcare.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 4.1.46.Final-tuxcare.1Patch TuxCare security update for io.netty
Event History
Child vulnerabilities
Contains the following vulnerabilities.
- CVE-2021-21295
- CVE-2021-21409
- CVE-2021-37136
- CVE-2021-37137
- CVE-2021-43797
- CVE-2022-41881
- CVE-2023-34462
- CVE-2024-29025
- CVE-2024-47535
- CVE-2025-24970
- CVE-2025-55163
- CVE-2025-58056
- CVE-2025-59419
- CVE-2025-67735
- CVE-2026-41417
- CVE-2026-42579
- CVE-2026-42581
- CVE-2026-42584
- CVE-2026-42585
- CVE-2026-42586
- CVE-2026-44249
- CVE-2026-44890
- CVE-2026-44893
- CVE-2026-45416
- CVE-2026-45673
- CVE-2026-46340
- CVE-2026-48059
- CVE-2026-50010
- CVE-2026-50020
- CVE-2026-50560
- CVE-2026-56819
Frequently Asked Questions
Which components are covered by this update?
The update covers the listed TuxCare io.netty packages, including netty-codec, netty-codec-dns, netty-codec-haproxy, netty-codec-http, netty-codec-http2, netty-codec-redis, netty-codec-smtp, and netty-common.
What package version contains the fixes?
The listed CVEs are fixed in io.netty version 4.1.46.Final-tuxcare.1.