{"id":"CLSA-2026-1787301097","summary":"TuxCare security update for io.netty (60 CVEs)","details":"TuxCare rebuilt 47 io.netty packages to address 60 CVEs. Fixed in 4.1.119.Final-tuxcare.1.","modified":"2026-09-07T19:57:28.229944179Z","published":"2026-08-21T08:31:37Z","upstream":["CVE-2025-55163","CVE-2025-58056","CVE-2025-58057","CVE-2025-59419","CVE-2025-67735","CVE-2026-33870","CVE-2026-33871","CVE-2026-41417","CVE-2026-42577","CVE-2026-42578","CVE-2026-42579","CVE-2026-42580","CVE-2026-42581","CVE-2026-42583","CVE-2026-42584","CVE-2026-42585","CVE-2026-42586","CVE-2026-42587","CVE-2026-44248","CVE-2026-44249","CVE-2026-44250","CVE-2026-44890","CVE-2026-44891","CVE-2026-44893","CVE-2026-45416","CVE-2026-45536","CVE-2026-45673","CVE-2026-45674","CVE-2026-46340","CVE-2026-47244","CVE-2026-47691","CVE-2026-48006","CVE-2026-48043","CVE-2026-48059","CVE-2026-50010","CVE-2026-50011","CVE-2026-50020","CVE-2026-50560","CVE-2026-55831","CVE-2026-55833","CVE-2026-55851","CVE-2026-56745","CVE-2026-56746","CVE-2026-56817","CVE-2026-56818","CVE-2026-56819","CVE-2026-56820","CVE-2026-56821","CVE-2026-56822","CVE-2026-59898","CVE-2026-59899","CVE-2026-59900","CVE-2026-59901","CVE-2026-59919","CVE-2026-59920","CVE-2026-59921","CVE-2026-73507","CVE-2026-73508","GHSA-mfg7-5gfp-c4w3","GHSA-v74w-7mr3-4qg3"],"affected":[{"package":{"name":"io.netty:netty-all","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-all"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-bom","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-bom"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-buffer","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-buffer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec-dns","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-dns"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec-haproxy","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-haproxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec-http","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-http"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec-http2","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-http2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec-memcache","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-memcache"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec-mqtt","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-mqtt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec-redis","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-redis"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec-smtp","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-smtp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec-socks","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-socks"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec-stomp","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-stomp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-codec-xml","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-codec-xml"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-common","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-dev-tools","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-dev-tools"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-example","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-example"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-handler","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-handler"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-handler-proxy","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-handler-proxy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-handler-ssl-ocsp","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-handler-ssl-ocsp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-microbench","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-microbench"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-parent","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-resolver","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-resolver"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-resolver-dns","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-resolver-dns"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-resolver-dns-classes-macos","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-resolver-dns-classes-macos"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-resolver-dns-native-macos","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-resolver-dns-native-macos"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-testsuite","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-testsuite-autobahn","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-autobahn"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-testsuite-http2","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-http2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-testsuite-native","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-native"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-testsuite-native-image","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-native-image"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-testsuite-native-image-client","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-native-image-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-testsuite-native-image-client-runtime-init","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-native-image-client-runtime-init"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-testsuite-osgi","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-osgi"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-testsuite-shading","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-testsuite-shading"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-transport","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-transport-blockhound-tests","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-blockhound-tests"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-transport-classes-epoll","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-classes-epoll"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-transport-classes-kqueue","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-classes-kqueue"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-transport-native-epoll","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-native-epoll"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-transport-native-kqueue","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-native-kqueue"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-transport-native-unix-common","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-native-unix-common"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-transport-native-unix-common-tests","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-native-unix-common-tests"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-transport-rxtx","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-rxtx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-transport-sctp","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-sctp"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}},{"package":{"name":"io.netty:netty-transport-udt","ecosystem":"TuxCare:Maven","purl":"pkg:maven/io.netty/netty-transport-udt"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.119.Final-tuxcare.1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787301097.json"}}],"schema_version":"1.9.0"}