Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Updated Netty packages prevent remote attacks
published 3 months ago
Summary
The Netty library components used in your applications have been rebuilt to close five security gaps that could let attackers execute code or cause crashes. Install the new version 4.1.92.Final‑tuxcare.4 for all Netty packages you use to keep your software safe.
What to do
- Update netty io.netty:netty-all to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-bom to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-buffer to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec-dns to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec-haproxy to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec-http to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec-http2 to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec-memcache to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec-mqtt to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec-redis to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec-smtp to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec-socks to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec-stomp to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-codec-xml to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-common to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-dev-tools to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-example to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-handler to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-handler-proxy to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-handler-ssl-ocsp to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-microbench to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-parent to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-resolver to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-resolver-dns to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-resolver-dns-classes-macos to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-resolver-dns-native-macos to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-autobahn to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-http2 to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-native to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-native-image to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-native-image-client to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-native-image-client-runtime-init to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-osgi to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-testsuite-shading to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-transport to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-transport-blockhound-tests to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-transport-classes-epoll to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-transport-classes-kqueue to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-transport-native-epoll to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-transport-native-kqueue to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-transport-native-unix-common to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-transport-native-unix-common-tests to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-transport-rxtx to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-transport-sctp to version 4.1.92.Final-tuxcare.4.
- Update netty io.netty:netty-transport-udt to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-codec-http to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-all to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-codec-dns to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-codec-http2 to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-codec-redis to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-example to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-handler-proxy to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-handler-ssl-ocsp to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-microbench to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-resolver-dns to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-resolver-dns-classes-macos to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-resolver-dns-native-macos to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-testsuite to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-testsuite-autobahn to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-testsuite-http2 to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-testsuite-native to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-testsuite-native-image to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-testsuite-native-image-client to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-transport-blockhound-tests to version 4.1.92.Final-tuxcare.4.
- Update io.netty:netty-transport-sctp to version 4.1.92.Final-tuxcare.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | netty | io.netty:netty-all |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-bom |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-buffer |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-dns |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-haproxy |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-http |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-http2 |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-memcache |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-mqtt |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-redis |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-smtp |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-socks |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-stomp |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-codec-xml |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-common |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-dev-tools |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-example |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-handler |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-handler-proxy |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-handler-ssl-ocsp |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-microbench |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-parent |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-resolver |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-resolver-dns |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-resolver-dns-classes-macos |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-resolver-dns-native-macos |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-autobahn |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-http2 |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-native |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-native-image |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-native-image-client |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-native-image-client-runtime-init |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-osgi |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-testsuite-shading |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-blockhound-tests |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-classes-epoll |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-classes-kqueue |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-native-epoll |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-native-kqueue |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-native-unix-common |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-native-unix-common-tests |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-rxtx |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-sctp |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | netty | io.netty:netty-transport-udt |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-codec-http |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-all |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-codec-dns |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
Showing 50 of 67. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | – | io.netty:netty-codec-http2 |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-codec-redis |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-example |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-handler-proxy |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-handler-ssl-ocsp |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-microbench |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-resolver-dns |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-resolver-dns-classes-macos |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-resolver-dns-native-macos |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-testsuite |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-testsuite-autobahn |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-testsuite-http2 |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-testsuite-native |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-testsuite-native-image |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-testsuite-native-image-client |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-transport-blockhound-tests |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
| TuxCare:Maven | – | io.netty:netty-transport-sctp |
>= 4.1.92.Final, < 4.1.92.Final-tuxcare.4 Fix: upgrade to 4.1.92.Final-tuxcare.4
|
Original advisory text
TuxCare security update for io.netty (5 CVEs)
TuxCare rebuilt 5 io.netty packages to address 5 CVEs. Fixed in 4.1.92.Final-tuxcare.4.
Timeline
Published4 Aug 2026
Updated2 Nov 2026
First seen15 Oct 2026
Sources
CLSA-2026-1783991057 · OSV
Track software like this
Free during beta