CLSA-2026-1794562758: TuxCare security update for io.netty:netty-handler (2 CVEs)
Published Nov 13, 2026
·Updated
TuxCare rebuilt io.netty:netty-handler to address 2 CVEs. Fixed in 4.1.81.Final-tuxcare.6.
Affected Software
1 affected componentFixes available
tuxcare/io.netty:netty-handler>=4.1.81.Final<4.1.81.Final-tuxcare.6
4.1.81.Final-tuxcare.6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/io.netty:netty-handlerto a version that resolves this vulnerability.Fixed in 4.1.81.Final-tuxcare.6 - Upgrade
Upgrade
io.netty:netty-handlerto a version that resolves this vulnerability.Fixed in 4.1.81.Final-tuxcare.6
Event History
Nov 13, 2026
Advisory Published
via OSV·10:39 AM
Data Sourced
via OSV·10:39 AM
DescriptionAffected Software
Frequently Asked Questions
1
Which package version contains the fixes?
The two CVEs are fixed in io.netty:netty-handler version 4.1.81.Final-tuxcare.6.
2
How can I determine whether my deployment needs the update?
Check the installed or bundled version of io.netty:netty-handler. Deployments using a version earlier than 4.1.81.Final-tuxcare.6 should be updated to the fixed TuxCare rebuild.