Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Netty libraries could be exploited to disrupt services
published 2 months ago
Summary
The Netty components netty-codec-haproxy, netty-codec-http, netty-codec, netty-bom, and netty-codec-dns have been found to contain flaws that could let an attacker interfere with your applications. Updating to version 4.1.73.Final-tuxcare.4 fixes these issues. Apply the updated packages as soon as possible to keep your systems running smoothly.
What to do
- Update netty io.netty:netty-codec-haproxy to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-codec-http to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-codec to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-bom to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-codec-dns to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-buffer to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-dev-tools to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-autobahn to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-handler-proxy to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-transport-native-epoll to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-common to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-codec-smtp to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-codec-memcache to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-codec-xml to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-codec-http2 to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-codec-stomp to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-handler to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-parent to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-osgi to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-transport-blockhound-tests to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-codec-redis to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-example to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-transport-rxtx to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-resolver-dns to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-resolver to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-microbench to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-transport-native-unix-common to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-transport to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-http2 to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-codec-socks to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-codec-mqtt to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-transport-native-unix-common-tests to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-resolver-dns-native-macos to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-native-image-client to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-native to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-shading to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-resolver-dns-classes-macos to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-transport-classes-epoll to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-transport-classes-kqueue to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-transport-udt to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-transport-sctp to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-transport-native-kqueue to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-native-image to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-all to version 4.1.73.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-native-image-client-runtime-init to version 4.1.73.Final-tuxcare.4.
- Update io.netty:netty-all to version 4.1.73.Final-tuxcare.4.
- Update io.netty:netty-codec-dns to version 4.1.73.Final-tuxcare.4.
- Update io.netty:netty-example to version 4.1.73.Final-tuxcare.4.
- Update io.netty:netty-resolver-dns to version 4.1.73.Final-tuxcare.4.
- Update io.netty:netty-resolver-dns-classes-macos to version 4.1.73.Final-tuxcare.4.
- Update io.netty:netty-resolver-dns-native-macos to version 4.1.73.Final-tuxcare.4.
- Update io.netty:netty-testsuite to version 4.1.73.Final-tuxcare.4.
- Update io.netty:netty-testsuite-native to version 4.1.73.Final-tuxcare.4.
- Update io.netty:netty-testsuite-native-image-client to version 4.1.73.Final-tuxcare.4.
- Update io.netty:netty-transport-blockhound-tests to version 4.1.73.Final-tuxcare.4.
- Update io.netty:netty-transport-sctp to version 4.1.73.Final-tuxcare.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | netty | io.netty:netty-codec-haproxy |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-http |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-bom |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-dns |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-buffer |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-dev-tools |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-autobahn |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-handler-proxy |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-native-epoll |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-common |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-smtp |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-memcache |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-xml |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-http2 |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-stomp |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-handler |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-parent |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-osgi |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-blockhound-tests |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-redis |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-example |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-rxtx |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-resolver-dns |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-resolver |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-microbench |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-native-unix-common |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-http2 |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-socks |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-mqtt |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-native-unix-common-tests |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-resolver-dns-native-macos |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-native-image-client |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-native |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-shading |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-resolver-dns-classes-macos |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-classes-epoll |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-classes-kqueue |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-udt |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-sctp |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-native-kqueue |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-native-image |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-all |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-native-image-client-runtime-init |
< 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-all |
>= 4.1.73.Final, < 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-codec-dns |
>= 4.1.73.Final, < 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-example |
>= 4.1.73.Final, < 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-resolver-dns |
>= 4.1.73.Final, < 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
Showing 50 of 57. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | – | io.netty:netty-resolver-dns-classes-macos |
>= 4.1.73.Final, < 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-resolver-dns-native-macos |
>= 4.1.73.Final, < 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-testsuite |
>= 4.1.73.Final, < 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-testsuite-native |
>= 4.1.73.Final, < 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-testsuite-native-image-client |
>= 4.1.73.Final, < 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-transport-blockhound-tests |
>= 4.1.73.Final, < 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-transport-sctp |
>= 4.1.73.Final, < 4.1.73.Final-tuxcare.4 Fix: upgrade to 4.1.73.Final-tuxcare.4
|
Original advisory text
TuxCare security update for io.netty (3 CVEs)
TuxCare rebuilt 3 io.netty packages to address 3 CVEs. Fixed in 4.1.73.Final-tuxcare.4.
Timeline
Published24 Aug 2026
Updated2 Nov 2026
First seen24 Aug 2026
Sources
CLSA-2026-1787559127 · OSV
Track software like this
Free during beta