CLSA-2026-1789513129

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789513129.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1789513129
Upstream
CVE (4)
Published
2026-09-15T22:58:49Z
Modified
2026-11-02T19:46:16Z
Summary
TuxCare security update for io.netty (4 CVEs)
Details

TuxCare rebuilt 3 io.netty packages to address 4 CVEs. Fixed in 4.1.43.Final-tuxcare.1.

Affected packages

TuxCare:Maven / io.netty:netty-codec

Package

Name
io.netty:netty-codec
Purl
pkg:maven/io.netty/netty-codec

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.43.Final
Fixed
4.1.43.Final-tuxcare.1

Affected versions

4.*
4.1.43.Final

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789513129.json"
tuxcare 
{
    "base_version":  "4.1.43.Final",
    "fixed_version":  "4.1.43.Final-tuxcare.1"
}

TuxCare:Maven / io.netty:netty-codec-haproxy

Package

Name
io.netty:netty-codec-haproxy
Purl
pkg:maven/io.netty/netty-codec-haproxy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.43.Final
Fixed
4.1.43.Final-tuxcare.1

Affected versions

4.*
4.1.43.Final

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789513129.json"
tuxcare 
{
    "base_version":  "4.1.43.Final",
    "fixed_version":  "4.1.43.Final-tuxcare.1"
}

TuxCare:Maven / io.netty:netty-codec-http2

Package

Name
io.netty:netty-codec-http2
Purl
pkg:maven/io.netty/netty-codec-http2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.43.Final
Fixed
4.1.43.Final-tuxcare.1

Affected versions

4.*
4.1.43.Final

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789513129.json"
tuxcare 
{
    "base_version":  "4.1.43.Final",
    "fixed_version":  "4.1.43.Final-tuxcare.1"
}