CLSA-2026-1789737170

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1789737170
Upstream
CVE (3)
Published
2026-09-18T13:12:50Z
Modified
2026-10-30T19:45:35Z
Summary
TuxCare security update for io.netty (3 CVEs)
Details

TuxCare rebuilt 12 io.netty packages to address 3 CVEs. Fixed in 4.1.49.Final-tuxcare.5.

Affected packages

TuxCare:Maven
io.netty:netty-codec-haproxy

Package

Name
io.netty:netty-codec-haproxy
Purl
pkg:maven/io.netty/netty-codec-haproxy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}
io.netty:netty-codec-http

Package

Name
io.netty:netty-codec-http
Purl
pkg:maven/io.netty/netty-codec-http

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}
io.netty:netty-codec-http2

Package

Name
io.netty:netty-codec-http2
Purl
pkg:maven/io.netty/netty-codec-http2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}
io.netty:netty-example

Package

Name
io.netty:netty-example
Purl
pkg:maven/io.netty/netty-example

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}
io.netty:netty-handler

Package

Name
io.netty:netty-handler
Purl
pkg:maven/io.netty/netty-handler

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}
io.netty:netty-handler-proxy

Package

Name
io.netty:netty-handler-proxy
Purl
pkg:maven/io.netty/netty-handler-proxy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}
io.netty:netty-microbench

Package

Name
io.netty:netty-microbench
Purl
pkg:maven/io.netty/netty-microbench

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}
io.netty:netty-testsuite

Package

Name
io.netty:netty-testsuite
Purl
pkg:maven/io.netty/netty-testsuite

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}
io.netty:netty-testsuite-autobahn

Package

Name
io.netty:netty-testsuite-autobahn
Purl
pkg:maven/io.netty/netty-testsuite-autobahn

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}
io.netty:netty-testsuite-http2

Package

Name
io.netty:netty-testsuite-http2
Purl
pkg:maven/io.netty/netty-testsuite-http2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}
io.netty:netty-testsuite-native-image

Package

Name
io.netty:netty-testsuite-native-image
Purl
pkg:maven/io.netty/netty-testsuite-native-image

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}
io.netty:netty-transport-blockhound-tests

Package

Name
io.netty:netty-transport-blockhound-tests
Purl
pkg:maven/io.netty/netty-transport-blockhound-tests

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.1.49.Final
Fixed
4.1.49.Final-tuxcare.5

Affected versions

4.*
4.1.49.Final
4.1.49.Final-tuxcare.1
4.1.49.Final-tuxcare.2
4.1.49.Final-tuxcare.3
4.1.49.Final-tuxcare.4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789737170.json"
tuxcare 
{
    "base_version":  "4.1.49.Final",
    "fixed_version":  "4.1.49.Final-tuxcare.5"
}