CLSA-2026-1794180397: TuxCare security update for io.netty:netty-codec-smtp (1 CVE)

No. It states that one CVE is addressed but does not provide the CVE identifier.

The fix is included in io.netty:netty-codec-smtp version 4.1.21.Final-tuxcare.5.

Published Nov 9, 2026

Updated

TuxCare rebuilt io.netty:netty-codec-smtp to address 1 CVE. Fixed in 4.1.21.Final-tuxcare.5.

Affected Software

1 affected componentFixes available

tuxcare/io.netty:netty-codec-smtp>=4.1.21.Final<4.1.21.Final-tuxcare.5

4.1.21.Final-tuxcare.5

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/io.netty:netty-codec-smtp to a version that resolves this vulnerability.
Fixed in 4.1.21.Final-tuxcare.5
Upgrade
Upgrade io.netty:netty-codec-smtp to a version that resolves this vulnerability.
Fixed in 4.1.21.Final-tuxcare.5

Nov 9, 2026

Advisory Published

via OSV·12:26 AM

Data Sourced

via OSV·12:26 AM

DescriptionAffected Software

Contains the following vulnerabilities.

No. It states that one CVE is addressed but does not provide the CVE identifier.

The fix is included in io.netty:netty-codec-smtp version 4.1.21.Final-tuxcare.5.