CLSA-2026-1794473243

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794473243.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1794473243

Upstream

CVE (2)

Published

2026-11-12T09:47:24Z

Modified

2026-11-12T13:45:06Z

Summary

TuxCare security update for io.netty (2 CVEs)

Details

TuxCare rebuilt 2 io.netty packages to address 2 CVEs. Fixed in 4.2.12.Final-tuxcare.4.

Affected packages

TuxCare:Maven / io.netty:netty-codec-http2

Package

Name: io.netty:netty-codec-http2
Purl: pkg:maven/io.netty/netty-codec-http2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.2.12.Final

Fixed

4.2.12.Final-tuxcare.4

Affected versions

4.*

4.2.12.Final

4.2.12.Final-tuxcare.1

4.2.12.Final-tuxcare.2

4.2.12.Final-tuxcare.3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794473243.json"

tuxcare

{
    "base_version": "4.2.12.Final",
    "fixed_version": "4.2.12.Final-tuxcare.4"
}

TuxCare:Maven / io.netty:netty-handler

Package

Name: io.netty:netty-handler
Purl: pkg:maven/io.netty/netty-handler

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.2.12.Final

Fixed

4.2.12.Final-tuxcare.4

Affected versions

4.*

4.2.12.Final

4.2.12.Final-tuxcare.1

4.2.12.Final-tuxcare.2

4.2.12.Final-tuxcare.3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794473243.json"

tuxcare

{
    "base_version": "4.2.12.Final",
    "fixed_version": "4.2.12.Final-tuxcare.4"
}