CVE-2025-24970
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
CVE-2025-24970 is a high vulnerability (CVSS 7.5) in Netty, published October 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.19%, the 82nd percentile. Fixed in io.netty:netty-handler 4.1.118.Final.
- Severity
- 7.5 HighCVSS 3.1, CVE List
- Exploit chance
- 2.19%EPSS, 82nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
4.1.118.Finalio.netty:netty-handler +299 more
Description
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead to a native crash. Version 4.1.118.Final contains a patch. As workaround its possible to either disable the usage of the native SSLEngine or change the code manually.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
io.netty:netty-handlerMaven | 4.1.91.Final to 4.1.117.Final | 4.1.118.Final |
io.netty:netty-codec-http2Maven | before 4.1.100.Final | 4.1.100.Final |
io.netty:netty-handlerTuxCare:Maven | 4.1.115.Final up to 4.1.115.Final-tuxcare.1 | 4.1.115.Final-tuxcare.1 |
io.netty:netty-codecTuxCare:Maven From an advisory covering 5 CVEs | 4.1.112.Final up to 4.1.112.Final-tuxcare.1 | 4.1.112.Final-tuxcare.1 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 5 CVEs | 4.1.112.Final up to 4.1.112.Final-tuxcare.1 | 4.1.112.Final-tuxcare.1 |
io.netty:netty-codec-smtpTuxCare:Maven From an advisory covering 5 CVEs | 4.1.112.Final up to 4.1.112.Final-tuxcare.1 | 4.1.112.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 5 CVEs | 4.1.112.Final up to 4.1.112.Final-tuxcare.1 | 4.1.112.Final-tuxcare.1 |
io.netty:netty-codec-smtpTuxCare:Maven From an advisory covering 2 CVEs | 4.1.63.Final up to 4.1.63.Final-tuxcare.3, plus listed versions 4.1.63.Final-tuxcare.14.1.63.Final-tuxcare.2 | 4.1.63.Final-tuxcare.3 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 2 CVEs | 4.1.63.Final up to 4.1.63.Final-tuxcare.3, plus listed versions 4.1.63.Final-tuxcare.14.1.63.Final-tuxcare.2 | 4.1.63.Final-tuxcare.3 |
io.netty:netty-codecTuxCare:Maven From an advisory covering 5 CVEs | 4.1.48.Final up to 4.1.48.Final-tuxcare.1 | 4.1.48.Final-tuxcare.1 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 5 CVEs | 4.1.48.Final up to 4.1.48.Final-tuxcare.1 | 4.1.48.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 5 CVEs | 4.1.48.Final up to 4.1.48.Final-tuxcare.1 | 4.1.48.Final-tuxcare.1 |
io.netty:netty-codecTuxCare:Maven From an advisory covering 9 CVEs | 4.1.49.Final up to 4.1.49.Final-tuxcare.1 | 4.1.49.Final-tuxcare.1 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 9 CVEs | 4.1.49.Final up to 4.1.49.Final-tuxcare.1 | 4.1.49.Final-tuxcare.1 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 9 CVEs | 4.1.49.Final up to 4.1.49.Final-tuxcare.1 | 4.1.49.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 9 CVEs | 4.1.49.Final up to 4.1.49.Final-tuxcare.1 | 4.1.49.Final-tuxcare.1 |
io.netty:netty-codec-haproxyTuxCare:Maven From an advisory covering 5 CVEs | 4.1.82.Final up to 4.1.82.Final-tuxcare.1 | 4.1.82.Final-tuxcare.1 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 5 CVEs | 4.1.82.Final up to 4.1.82.Final-tuxcare.1 | 4.1.82.Final-tuxcare.1 |
io.netty:netty-codec-smtpTuxCare:Maven From an advisory covering 5 CVEs | 4.1.82.Final up to 4.1.82.Final-tuxcare.1 | 4.1.82.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 5 CVEs | 4.1.82.Final up to 4.1.82.Final-tuxcare.1 | 4.1.82.Final-tuxcare.1 |
io.netty:netty-codecTuxCare:Maven From an advisory covering 9 CVEs | 4.1.58.Final up to 4.1.58.Final-tuxcare.1 | 4.1.58.Final-tuxcare.1 |
io.netty:netty-codec-haproxyTuxCare:Maven From an advisory covering 9 CVEs | 4.1.58.Final up to 4.1.58.Final-tuxcare.1 | 4.1.58.Final-tuxcare.1 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 9 CVEs | 4.1.58.Final up to 4.1.58.Final-tuxcare.1 | 4.1.58.Final-tuxcare.1 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 9 CVEs | 4.1.58.Final up to 4.1.58.Final-tuxcare.1 | 4.1.58.Final-tuxcare.1 |
io.netty:netty-codec-smtpTuxCare:Maven From an advisory covering 9 CVEs | 4.1.58.Final up to 4.1.58.Final-tuxcare.1 | 4.1.58.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 9 CVEs | 4.1.58.Final up to 4.1.58.Final-tuxcare.1 | 4.1.58.Final-tuxcare.1 |
io.netty:netty-codecTuxCare:Maven From an advisory covering 14 CVEs | 4.1.60.Final up to 4.1.60.Final-tuxcare.1 | 4.1.60.Final-tuxcare.1 |
io.netty:netty-codec-haproxyTuxCare:Maven From an advisory covering 14 CVEs | 4.1.60.Final up to 4.1.60.Final-tuxcare.1 | 4.1.60.Final-tuxcare.1 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 14 CVEs | 4.1.60.Final up to 4.1.60.Final-tuxcare.1 | 4.1.60.Final-tuxcare.1 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 14 CVEs | 4.1.60.Final up to 4.1.60.Final-tuxcare.1 | 4.1.60.Final-tuxcare.1 |
io.netty:netty-codec-smtpTuxCare:Maven From an advisory covering 14 CVEs | 4.1.60.Final up to 4.1.60.Final-tuxcare.1 | 4.1.60.Final-tuxcare.1 |
io.netty:netty-commonTuxCare:Maven From an advisory covering 14 CVEs | 4.1.60.Final up to 4.1.60.Final-tuxcare.1 | 4.1.60.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 14 CVEs | 4.1.60.Final up to 4.1.60.Final-tuxcare.1 | 4.1.60.Final-tuxcare.1 |
io.netty:netty-codec-haproxyTuxCare:Maven From an advisory covering 8 CVEs | 4.1.75.Final up to 4.1.75.Final-tuxcare.1 | 4.1.75.Final-tuxcare.1 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 8 CVEs | 4.1.75.Final up to 4.1.75.Final-tuxcare.1 | 4.1.75.Final-tuxcare.1 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 8 CVEs | 4.1.75.Final up to 4.1.75.Final-tuxcare.1 | 4.1.75.Final-tuxcare.1 |
io.netty:netty-codec-smtpTuxCare:Maven From an advisory covering 8 CVEs | 4.1.75.Final up to 4.1.75.Final-tuxcare.1 | 4.1.75.Final-tuxcare.1 |
io.netty:netty-commonTuxCare:Maven From an advisory covering 8 CVEs | 4.1.75.Final up to 4.1.75.Final-tuxcare.1 | 4.1.75.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 8 CVEs | 4.1.75.Final up to 4.1.75.Final-tuxcare.1 | 4.1.75.Final-tuxcare.1 |
io.netty:netty-codecTuxCare:Maven From an advisory covering 11 CVEs | 4.1.93.Final up to 4.1.93.Final-tuxcare.1 | 4.1.93.Final-tuxcare.1 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 11 CVEs | 4.1.93.Final up to 4.1.93.Final-tuxcare.1 | 4.1.93.Final-tuxcare.1 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 11 CVEs | 4.1.93.Final up to 4.1.93.Final-tuxcare.1 | 4.1.93.Final-tuxcare.1 |
io.netty:netty-codec-smtpTuxCare:Maven From an advisory covering 11 CVEs | 4.1.93.Final up to 4.1.93.Final-tuxcare.1 | 4.1.93.Final-tuxcare.1 |
io.netty:netty-commonTuxCare:Maven From an advisory covering 11 CVEs | 4.1.93.Final up to 4.1.93.Final-tuxcare.1 | 4.1.93.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 11 CVEs | 4.1.93.Final up to 4.1.93.Final-tuxcare.1 | 4.1.93.Final-tuxcare.1 |
io.netty:netty-codec-haproxyTuxCare:Maven From an advisory covering 6 CVEs | 4.1.73.Final up to 4.1.73.Final-tuxcare.1 | 4.1.73.Final-tuxcare.1 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 6 CVEs | 4.1.73.Final up to 4.1.73.Final-tuxcare.1 | 4.1.73.Final-tuxcare.1 |
io.netty:netty-codec-smtpTuxCare:Maven From an advisory covering 6 CVEs | 4.1.73.Final up to 4.1.73.Final-tuxcare.1 | 4.1.73.Final-tuxcare.1 |
io.netty:netty-commonTuxCare:Maven From an advisory covering 6 CVEs | 4.1.73.Final up to 4.1.73.Final-tuxcare.1 | 4.1.73.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 6 CVEs | 4.1.73.Final up to 4.1.73.Final-tuxcare.1 | 4.1.73.Final-tuxcare.1 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 7 CVEs | 4.1.92.Final up to 4.1.92.Final-tuxcare.1 | 4.1.92.Final-tuxcare.1 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 7 CVEs | 4.1.92.Final up to 4.1.92.Final-tuxcare.1 | 4.1.92.Final-tuxcare.1 |
io.netty:netty-codec-smtpTuxCare:Maven From an advisory covering 7 CVEs | 4.1.92.Final up to 4.1.92.Final-tuxcare.1 | 4.1.92.Final-tuxcare.1 |
io.netty:netty-commonTuxCare:Maven From an advisory covering 7 CVEs | 4.1.92.Final up to 4.1.92.Final-tuxcare.1 | 4.1.92.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 7 CVEs | 4.1.92.Final up to 4.1.92.Final-tuxcare.1 | 4.1.92.Final-tuxcare.1 |
io.netty:netty-codecTuxCare:Maven From an advisory covering 8 CVEs | 4.1.117.Final up to 4.1.117.Final-tuxcare.2, plus listed versions 4.1.117.Final-tuxcare.1 | 4.1.117.Final-tuxcare.2 |
io.netty:netty-codec-haproxyTuxCare:Maven From an advisory covering 8 CVEs | 4.1.117.Final up to 4.1.117.Final-tuxcare.2, plus listed versions 4.1.117.Final-tuxcare.1 | 4.1.117.Final-tuxcare.2 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 8 CVEs | 4.1.117.Final up to 4.1.117.Final-tuxcare.2, plus listed versions 4.1.117.Final-tuxcare.1 | 4.1.117.Final-tuxcare.2 |
io.netty:netty-codec-redisTuxCare:Maven From an advisory covering 8 CVEs | 4.1.117.Final up to 4.1.117.Final-tuxcare.2, plus listed versions 4.1.117.Final-tuxcare.1 | 4.1.117.Final-tuxcare.2 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 8 CVEs | 4.1.117.Final up to 4.1.117.Final-tuxcare.2, plus listed versions 4.1.117.Final-tuxcare.1 | 4.1.117.Final-tuxcare.2 |
io.netty:netty-allTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-bomTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-bufferTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codecTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-dnsTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-haproxyTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-memcacheTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-mqttTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-redisTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-smtpTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-socksTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-stompTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-xmlTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-commonTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-dev-toolsTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-exampleTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-handler-proxyTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-handler-ssl-ocspTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-microbenchTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-parentTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-resolverTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-resolver-dnsTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-resolver-dns-classes-macosTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-resolver-dns-native-macosTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-testsuiteTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-testsuite-autobahnTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-testsuite-http2TuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-testsuite-nativeTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-testsuite-native-imageTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-testsuite-native-image-clientTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-testsuite-native-image-client-runtime-initTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-testsuite-osgiTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-testsuite-shadingTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-transportTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-transport-blockhound-testsTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-transport-classes-epollTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-transport-classes-kqueueTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-transport-native-epollTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-transport-native-kqueueTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-transport-native-unix-commonTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-transport-native-unix-common-testsTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-transport-rxtxTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-transport-sctpTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-transport-udtTuxCare:Maven From an advisory covering 60 CVEs | 4.1.111.Final up to 4.1.111.Final-tuxcare.1 | 4.1.111.Final-tuxcare.1 |
io.netty:netty-codec-dnsTuxCare:Maven From an advisory covering 8 CVEs | 4.1.79.Final up to 4.1.79.Final-tuxcare.1 | 4.1.79.Final-tuxcare.1 |
io.netty:netty-codec-haproxyTuxCare:Maven From an advisory covering 8 CVEs | 4.1.79.Final up to 4.1.79.Final-tuxcare.1 | 4.1.79.Final-tuxcare.1 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 8 CVEs | 4.1.79.Final up to 4.1.79.Final-tuxcare.1 | 4.1.79.Final-tuxcare.1 |
io.netty:netty-codec-smtpTuxCare:Maven From an advisory covering 8 CVEs | 4.1.79.Final up to 4.1.79.Final-tuxcare.1 | 4.1.79.Final-tuxcare.1 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 8 CVEs | 4.1.79.Final up to 4.1.79.Final-tuxcare.1 | 4.1.79.Final-tuxcare.1 |
io.netty:netty-resolver-dnsTuxCare:Maven From an advisory covering 8 CVEs | 4.1.79.Final up to 4.1.79.Final-tuxcare.1 | 4.1.79.Final-tuxcare.1 |
io.netty:netty-transport-sctpTuxCare:Maven From an advisory covering 8 CVEs | 4.1.79.Final up to 4.1.79.Final-tuxcare.1 | 4.1.79.Final-tuxcare.1 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 4 CVEs | 4.1.94.Final up to 4.1.94.Final-tuxcare.2, plus listed versions 4.1.94.Final-tuxcare.1 | 4.1.94.Final-tuxcare.2 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 4 CVEs | 4.1.94.Final up to 4.1.94.Final-tuxcare.2, plus listed versions 4.1.94.Final-tuxcare.1 | 4.1.94.Final-tuxcare.2 |
io.netty:netty-transport-classes-epollTuxCare:Maven From an advisory covering 4 CVEs | 4.1.94.Final up to 4.1.94.Final-tuxcare.2, plus listed versions 4.1.94.Final-tuxcare.1 | 4.1.94.Final-tuxcare.2 |
io.netty:netty-transport-sctpTuxCare:Maven From an advisory covering 4 CVEs | 4.1.94.Final up to 4.1.94.Final-tuxcare.2, plus listed versions 4.1.94.Final-tuxcare.1 | 4.1.94.Final-tuxcare.2 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 2 CVEs | 4.1.108.Final up to 4.1.108.Final-tuxcare.2, plus listed versions 4.1.108.Final-tuxcare.1 | 4.1.108.Final-tuxcare.2 |
io.netty:netty-transport-sctpTuxCare:Maven From an advisory covering 2 CVEs | 4.1.108.Final up to 4.1.108.Final-tuxcare.2, plus listed versions 4.1.108.Final-tuxcare.1 | 4.1.108.Final-tuxcare.2 |
io.netty:netty-codec-haproxyTuxCare:Maven From an advisory covering 11 CVEs | 4.1.52.Final up to 4.1.52.Final-tuxcare.3, plus listed versions 4.1.52.Final-tuxcare.14.1.52.Final-tuxcare.2 | 4.1.52.Final-tuxcare.3 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 11 CVEs | 4.1.52.Final up to 4.1.52.Final-tuxcare.3, plus listed versions 4.1.52.Final-tuxcare.14.1.52.Final-tuxcare.2 | 4.1.52.Final-tuxcare.3 |
io.netty:netty-codec-redisTuxCare:Maven From an advisory covering 11 CVEs | 4.1.52.Final up to 4.1.52.Final-tuxcare.3, plus listed versions 4.1.52.Final-tuxcare.14.1.52.Final-tuxcare.2 | 4.1.52.Final-tuxcare.3 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 11 CVEs | 4.1.52.Final up to 4.1.52.Final-tuxcare.3, plus listed versions 4.1.52.Final-tuxcare.14.1.52.Final-tuxcare.2 | 4.1.52.Final-tuxcare.3 |
io.netty:netty-resolver-dnsTuxCare:Maven From an advisory covering 11 CVEs | 4.1.52.Final up to 4.1.52.Final-tuxcare.3, plus listed versions 4.1.52.Final-tuxcare.14.1.52.Final-tuxcare.2 | 4.1.52.Final-tuxcare.3 |
io.netty:netty-transport-native-epollTuxCare:Maven From an advisory covering 11 CVEs | 4.1.52.Final up to 4.1.52.Final-tuxcare.3, plus listed versions 4.1.52.Final-tuxcare.14.1.52.Final-tuxcare.2 | 4.1.52.Final-tuxcare.3 |
io.netty:netty-transport-native-kqueueTuxCare:Maven From an advisory covering 11 CVEs | 4.1.52.Final up to 4.1.52.Final-tuxcare.3, plus listed versions 4.1.52.Final-tuxcare.14.1.52.Final-tuxcare.2 | 4.1.52.Final-tuxcare.3 |
io.netty:netty-codec-haproxyTuxCare:Maven From an advisory covering 5 CVEs | 4.1.43.Final up to 4.1.43.Final-tuxcare.2, plus listed versions 4.1.43.Final-tuxcare.1 | 4.1.43.Final-tuxcare.2 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 5 CVEs | 4.1.43.Final up to 4.1.43.Final-tuxcare.2, plus listed versions 4.1.43.Final-tuxcare.1 | 4.1.43.Final-tuxcare.2 |
io.netty:netty-handlerTuxCare:Maven From an advisory covering 5 CVEs | 4.1.43.Final up to 4.1.43.Final-tuxcare.2, plus listed versions 4.1.43.Final-tuxcare.1 | 4.1.43.Final-tuxcare.2 |
io.netty:netty-codecTuxCare:Maven From an advisory covering 19 CVEs | 4.1.99.Final up to 4.1.99.Final-tuxcare.1 | 4.1.99.Final-tuxcare.1 |
io.netty:netty-codec-haproxyTuxCare:Maven From an advisory covering 19 CVEs | 4.1.99.Final up to 4.1.99.Final-tuxcare.1 | 4.1.99.Final-tuxcare.1 |
io.netty:netty-codec-httpTuxCare:Maven From an advisory covering 19 CVEs | 4.1.99.Final up to 4.1.99.Final-tuxcare.1 | 4.1.99.Final-tuxcare.1 |
io.netty:netty-codec-http2TuxCare:Maven From an advisory covering 19 CVEs | 4.1.99.Final up to 4.1.99.Final-tuxcare.1 | 4.1.99.Final-tuxcare.1 |
io.netty:netty-codec-mqttTuxCare:Maven From an advisory covering 19 CVEs | 4.1.99.Final up to 4.1.99.Final-tuxcare.1 | 4.1.99.Final-tuxcare.1 |
io.netty:netty-handlerMaven | 4.1.91.Final up to 4.1.118.Final, plus listed versions 4.1.100.Final4.1.101.Final4.1.102.Final4.1.103.Final4.1.104.Final Show 21 moreShow less4.1.105.Final4.1.106.Final4.1.107.Final4.1.108.Final4.1.109.Final4.1.110.Final4.1.111.Final4.1.112.Final4.1.113.Final4.1.114.Final4.1.115.Final4.1.116.Final4.1.117.Final4.1.92.Final4.1.93.Final4.1.94.Final4.1.95.Final4.1.96.Final4.1.97.Final4.1.98.Final4.1.99.Final | 4.1.118.Final |
io.netty:netty-codec-http2Maven | before 4.1.100.Final, plus listed versions 4.1.0.Beta44.1.0.Beta54.1.0.Beta64.1.0.Beta74.1.0.Beta8 Show 45 moreShow less4.1.0.CR14.1.0.CR24.1.0.CR34.1.0.CR44.1.0.CR54.1.0.CR64.1.0.CR74.1.0.Final4.1.1.Final4.1.10.Final4.1.11.Final4.1.12.Final4.1.13.Final4.1.14.Final4.1.15.Final4.1.16.Final4.1.17.Final4.1.18.Final4.1.19.Final4.1.2.Final4.1.20.Final4.1.21.Final4.1.22.Final4.1.23.Final4.1.24.Final4.1.25.Final4.1.26.Final4.1.27.Final4.1.28.Final4.1.29.Final4.1.3.Final4.1.30.Final4.1.31.Final4.1.32.Final4.1.33.Final4.1.34.Final4.1.35.Final4.1.36.Final4.1.37.Final4.1.38.Final4.1.39.Final4.1.4.Final4.1.40.Final4.1.41.Final4.1.42.Final | 4.1.100.Final |
io.netty:netty-handlerRed Hat Lightwell:Maven From an advisory covering 6 CVEs | before 4.1.100.Final-rhlw-00001, plus listed versions 4.0.0.Alpha14.0.0.Alpha24.0.0.Alpha34.0.0.Alpha44.0.0.Alpha5 Show 45 moreShow less4.0.0.Alpha64.0.0.Alpha74.0.0.Alpha84.0.0.Beta14.0.0.Beta24.0.0.Beta34.0.0.CR14.0.0.CR24.0.0.CR34.0.0.CR44.0.0.CR54.0.0.CR64.0.0.CR74.0.0.CR84.0.0.CR94.0.0.Final4.0.1.Final4.0.10.Final4.0.11.Final4.0.12.Final4.0.13.Final4.0.14.Beta14.0.14.Final4.0.15.Final4.0.16.Final4.0.17.Final4.0.18.Final4.0.19.Final4.0.2.Final4.0.20.Final4.0.21.Final4.0.22.Final4.0.23.Final4.0.24.Final4.0.25.Final4.0.26.Final4.0.27.Final4.0.28.Final4.0.29.Final4.0.3.Final4.0.30.Final4.0.31.Final4.0.32.Final4.0.33.Final4.0.34.Final | 4.1.100.Final-rhlw-00001 |
eap8-eap-product-conf-parentRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:800.6.1-1.GA_redhat_00001.1.el8eap | 0:800.6.1-1.GA_redhat_00001.1.el8eap |
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:800.6.1-1.GA_redhat_00001.1.el8eap | 0:800.6.1-1.GA_redhat_00001.1.el8eap |
eap8-nettyRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-bufferRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-codecRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-codec-httpRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-codec-socksRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-commonRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-handlerRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-resolverRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-transportRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-transport-native-epollRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-transport-native-epoll-debuginfoRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el8eap | 0:4.1.119-1.Final_redhat_00002.1.el8eap |
eap8-slf4jRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:2.0.16-2.redhat_00003.1.el8eap | 0:2.0.16-2.redhat_00003.1.el8eap |
eap8-slf4j-apiRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:2.0.16-2.redhat_00003.1.el8eap | 0:2.0.16-2.redhat_00003.1.el8eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:8.0.6-15.GA_redhat_00009.1.el8eap | 0:8.0.6-15.GA_redhat_00009.1.el8eap |
eap8-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:8.0.6-15.GA_redhat_00009.1.el8eap | 0:8.0.6-15.GA_redhat_00009.1.el8eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:8.0.6-15.GA_redhat_00009.1.el8eap | 0:8.0.6-15.GA_redhat_00009.1.el8eap |
eap8-wildfly-java-jdk21Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:8.0.6-15.GA_redhat_00009.1.el8eap | 0:8.0.6-15.GA_redhat_00009.1.el8eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs | before 0:8.0.6-15.GA_redhat_00009.1.el8eap | 0:8.0.6-15.GA_redhat_00009.1.el8eap |
eap8-eap-product-conf-parentRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:800.6.1-1.GA_redhat_00001.1.el9eap | 0:800.6.1-1.GA_redhat_00001.1.el9eap |
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:800.6.1-1.GA_redhat_00001.1.el9eap | 0:800.6.1-1.GA_redhat_00001.1.el9eap |
eap8-nettyRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-bufferRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-codecRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-codec-httpRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-codec-socksRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-commonRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-handlerRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-resolverRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-transportRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-transport-native-epollRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-transport-native-epoll-debuginfoRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:4.1.119-1.Final_redhat_00002.1.el9eap | 0:4.1.119-1.Final_redhat_00002.1.el9eap |
eap8-slf4jRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:2.0.16-2.redhat_00003.1.el9eap | 0:2.0.16-2.redhat_00003.1.el9eap |
eap8-slf4j-apiRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:2.0.16-2.redhat_00003.1.el9eap | 0:2.0.16-2.redhat_00003.1.el9eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:8.0.6-15.GA_redhat_00009.1.el9eap | 0:8.0.6-15.GA_redhat_00009.1.el9eap |
eap8-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:8.0.6-15.GA_redhat_00009.1.el9eap | 0:8.0.6-15.GA_redhat_00009.1.el9eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:8.0.6-15.GA_redhat_00009.1.el9eap | 0:8.0.6-15.GA_redhat_00009.1.el9eap |
eap8-wildfly-java-jdk21Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:8.0.6-15.GA_redhat_00009.1.el9eap | 0:8.0.6-15.GA_redhat_00009.1.el9eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs | before 0:8.0.6-15.GA_redhat_00009.1.el9eap | 0:8.0.6-15.GA_redhat_00009.1.el9eap |
eap7-apache-commons-ioRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:2.16.1-1.redhat_00001.1.el7eap | 0:2.16.1-1.redhat_00001.1.el7eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:3.3.26-1.Final_redhat_00001.1.el7eap | 0:3.3.26-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el7eap | 0:1.5.19-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el7eap | 0:1.5.19-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el7eap | 0:1.5.19-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el7eap | 0:1.5.19-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el7eap | 0:1.5.19-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el7eap | 0:1.5.19-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el7eap | 0:1.5.19-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el7eap | 0:1.5.19-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el7eap | 0:1.5.19-1.Final_redhat_00001.1.el7eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:5.0.31-1.Final_redhat_00001.1.el7eap | 0:5.0.31-1.Final_redhat_00001.1.el7eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.10.0-41.Final_redhat_00041.1.el7eap | 0:1.10.0-41.Final_redhat_00041.1.el7eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.10.0-41.Final_redhat_00041.1.el7eap | 0:1.10.0-41.Final_redhat_00041.1.el7eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.10.0-41.Final_redhat_00041.1.el7eap | 0:1.10.0-41.Final_redhat_00041.1.el7eap |
eap7-weld-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el7eap | 0:3.1.11-1.Final_redhat_00001.1.el7eap |
eap7-weld-core-implRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el7eap | 0:3.1.11-1.Final_redhat_00001.1.el7eap |
eap7-weld-core-jsfRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el7eap | 0:3.1.11-1.Final_redhat_00001.1.el7eap |
eap7-weld-ejbRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el7eap | 0:3.1.11-1.Final_redhat_00001.1.el7eap |
eap7-weld-jtaRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el7eap | 0:3.1.11-1.Final_redhat_00001.1.el7eap |
eap7-weld-probe-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el7eap | 0:3.1.11-1.Final_redhat_00001.1.el7eap |
eap7-weld-webRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el7eap | 0:3.1.11-1.Final_redhat_00001.1.el7eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el7eap | 0:7.4.22-2.GA_redhat_00001.1.el7eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.15.25-1.Final_redhat_00001.1.el7eap | 0:1.15.25-1.Final_redhat_00001.1.el7eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:1.15.25-1.Final_redhat_00001.1.el7eap | 0:1.15.25-1.Final_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el7eap | 0:7.4.22-2.GA_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el7eap | 0:7.4.22-2.GA_redhat_00001.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el7eap | 0:7.4.22-2.GA_redhat_00001.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el7eap | 0:7.4.22-2.GA_redhat_00001.1.el7eap |
eap7-apache-commons-ioRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:2.16.1-1.redhat_00001.1.el8eap | 0:2.16.1-1.redhat_00001.1.el8eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:3.3.26-1.Final_redhat_00001.1.el8eap | 0:3.3.26-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el8eap | 0:1.5.19-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el8eap | 0:1.5.19-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el8eap | 0:1.5.19-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el8eap | 0:1.5.19-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el8eap | 0:1.5.19-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el8eap | 0:1.5.19-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el8eap | 0:1.5.19-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el8eap | 0:1.5.19-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el8eap | 0:1.5.19-1.Final_redhat_00001.1.el8eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:5.0.31-1.Final_redhat_00001.1.el8eap | 0:5.0.31-1.Final_redhat_00001.1.el8eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.10.0-41.Final_redhat_00041.1.el8eap | 0:1.10.0-41.Final_redhat_00041.1.el8eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.10.0-41.Final_redhat_00041.1.el8eap | 0:1.10.0-41.Final_redhat_00041.1.el8eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.10.0-41.Final_redhat_00041.1.el8eap | 0:1.10.0-41.Final_redhat_00041.1.el8eap |
eap7-weld-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el8eap | 0:3.1.11-1.Final_redhat_00001.1.el8eap |
eap7-weld-core-implRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el8eap | 0:3.1.11-1.Final_redhat_00001.1.el8eap |
eap7-weld-core-jsfRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el8eap | 0:3.1.11-1.Final_redhat_00001.1.el8eap |
eap7-weld-ejbRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el8eap | 0:3.1.11-1.Final_redhat_00001.1.el8eap |
eap7-weld-jtaRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el8eap | 0:3.1.11-1.Final_redhat_00001.1.el8eap |
eap7-weld-probe-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el8eap | 0:3.1.11-1.Final_redhat_00001.1.el8eap |
eap7-weld-webRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el8eap | 0:3.1.11-1.Final_redhat_00001.1.el8eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el8eap | 0:7.4.22-2.GA_redhat_00001.1.el8eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.15.25-1.Final_redhat_00001.1.el8eap | 0:1.15.25-1.Final_redhat_00001.1.el8eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:1.15.25-1.Final_redhat_00001.1.el8eap | 0:1.15.25-1.Final_redhat_00001.1.el8eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el8eap | 0:7.4.22-2.GA_redhat_00001.1.el8eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el8eap | 0:7.4.22-2.GA_redhat_00001.1.el8eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el8eap | 0:7.4.22-2.GA_redhat_00001.1.el8eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el8eap | 0:7.4.22-2.GA_redhat_00001.1.el8eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el8eap | 0:7.4.22-2.GA_redhat_00001.1.el8eap |
eap7-apache-commons-ioRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:2.16.1-1.redhat_00001.1.el9eap | 0:2.16.1-1.redhat_00001.1.el9eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:3.3.26-1.Final_redhat_00001.1.el9eap | 0:3.3.26-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el9eap | 0:1.5.19-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el9eap | 0:1.5.19-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el9eap | 0:1.5.19-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el9eap | 0:1.5.19-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el9eap | 0:1.5.19-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el9eap | 0:1.5.19-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el9eap | 0:1.5.19-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el9eap | 0:1.5.19-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.5.19-1.Final_redhat_00001.1.el9eap | 0:1.5.19-1.Final_redhat_00001.1.el9eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:5.0.31-1.Final_redhat_00001.1.el9eap | 0:5.0.31-1.Final_redhat_00001.1.el9eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.10.0-41.Final_redhat_00041.1.el9eap | 0:1.10.0-41.Final_redhat_00041.1.el9eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.10.0-41.Final_redhat_00041.1.el9eap | 0:1.10.0-41.Final_redhat_00041.1.el9eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:1.10.0-41.Final_redhat_00041.1.el9eap | 0:1.10.0-41.Final_redhat_00041.1.el9eap |
eap7-weld-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el9eap | 0:3.1.11-1.Final_redhat_00001.1.el9eap |
eap7-weld-core-implRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el9eap | 0:3.1.11-1.Final_redhat_00001.1.el9eap |
eap7-weld-core-jsfRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el9eap | 0:3.1.11-1.Final_redhat_00001.1.el9eap |
eap7-weld-ejbRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el9eap | 0:3.1.11-1.Final_redhat_00001.1.el9eap |
eap7-weld-jtaRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el9eap | 0:3.1.11-1.Final_redhat_00001.1.el9eap |
eap7-weld-probe-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el9eap | 0:3.1.11-1.Final_redhat_00001.1.el9eap |
eap7-weld-webRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:3.1.11-1.Final_redhat_00001.1.el9eap | 0:3.1.11-1.Final_redhat_00001.1.el9eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 4 CVEs | before 0:7.4.22-2.GA_redhat_00001.1.el9eap | 0:7.4.22-2.GA_redhat_00001.1.el9eap |
io.root.io.netty:netty-handlerRoot:Maven | before 4.1.97.Final-root.io.1 | 4.1.97.Final-root.io.14.1.115.Final-root.io.14.1.94.Final-root.io.14.1.108.Final-root.io.14.1.115.Final-root.io.34.1.115.Final-root.io.44.1.115.Final-root.io.54.1.115.Final-root.io.64.1.115.Final-root.io.74.1.94.Final-root.io.24.1.97.Final-root.io.64.1.115.Final-root.io.84.1.108.Final-root.io.34.1.115.Final-root.io.94.1.97.Final-root.io.74.1.94.Final-root.io.34.1.108.Final-root.io.44.1.118.Final-root.io.184.1.118.Final-root.io.194.1.118.Final-root.io.204.1.118.Final-root.io.214.1.118.Final-root.io.224.1.118.Final-root.io.23 |
io.netty:netty-handlerRoot:Maven | before 4.1.115.Final-aikido.9 | 4.1.115.Final-aikido.94.1.97.Final-aikido.74.1.94.Final-aikido.34.1.108.Final-aikido.44.1.118.Final-aikido.194.1.118.Final-aikido.204.1.118.Final-aikido.214.1.118.Final-aikido.224.1.118.Final-aikido.23 |
io.root.io.netty:netty-codec-http2Root:Maven | before 4.1.97.Final-root.io.1 | 4.1.97.Final-root.io.14.1.97.Final-root.io.24.1.97.Final-root.io.34.1.97.Final-root.io.44.1.97.Final-root.io.54.1.97.Final-root.io.64.1.97.Final-root.io.7 |
io.netty:netty-codec-http2Root:Maven | before 4.1.97.Final-aikido.7 | 4.1.97.Final-aikido.7 |
netty-tcnativeSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
nettySUSE:Linux Enterprise Module for Package Hub 15 SP6 From an advisory covering 2 CVEs | before 4.1.118-150200.4.29.2 | 4.1.118-150200.4.29.2 |
netty-tcnativeSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
netty-tcnativeSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
netty-tcnativeSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
netty-tcnativeSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
netty-tcnativeSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
netty-tcnativeSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
netty-tcnativeSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
netty-tcnativeSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
netty-tcnativeSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
netty-tcnativeSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
netty-tcnativeSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
netty-tcnativeSUSE:Enterprise Storage 7.1 From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
nettyopenSUSE:Leap 15.6 From an advisory covering 2 CVEs | before 4.1.118-150200.4.29.2 | 4.1.118-150200.4.29.2 |
netty-tcnativeopenSUSE:Leap 15.6 From an advisory covering 2 CVEs | before 2.0.70-150200.3.25.1 | 2.0.70-150200.3.25.1 |
nettyUbuntu:Pro:14.04:LTS | All versions, plus listed versions 1:3.2.6.Final-21:3.2.6.Final-2+deb8u2build0.14.04.1~esm11:3.2.6.Final-2+deb8u2ubuntu0.1~esm1 | None known |
nettyUbuntu:Pro:16.04:LTS | All versions, plus listed versions 1:3.2.6.Final-21:4.0.32-11:4.0.33-11:4.0.34-11:4.0.34-1ubuntu0.1~esm1 Show 4 moreShow less1:4.0.34-1ubuntu0.1~esm21:4.0.34-1ubuntu0.1~esm31:4.0.34-1ubuntu0.1~esm41:4.0.34-1ubuntu0.1~esm5 | None known |
nettyUbuntu:Pro:18.04:LTS | All versions, plus listed versions 1:4.1.7-41:4.1.7-4ubuntu0.1~esm11:4.1.7-4ubuntu0.11:4.1.7-4ubuntu0.1+esm11:4.1.7-4ubuntu0.1+esm2 Show 5 moreShow less1:4.1.7-4ubuntu0.1+esm31:4.1.7-4ubuntu0.1+esm41:4.1.7-4ubuntu0.1+esm51:4.1.7-4ubuntu0.1+esm61:4.1.7-4ubuntu0.1+esm7 | None known |
nettyUbuntu:Pro:20.04:LTS | All versions, plus listed versions 1:4.1.33-11:4.1.33-21:4.1.33-31:4.1.45-11:4.1.45-1ubuntu0.1~esm1 Show 5 moreShow less1:4.1.45-1ubuntu0.1~esm21:4.1.45-1ubuntu0.1~esm31:4.1.45-1ubuntu0.1~esm41:4.1.45-1ubuntu0.1~esm61:4.1.45-1ubuntu0.1~esm7 | None known |
nettyUbuntu:Pro:22.04:LTS | All versions, plus listed versions 1:4.1.48-41:4.1.48-4+deb11u1build0.22.04.11:4.1.48-4+deb11u2build0.22.04.11:4.1.48-4+deb11u2ubuntu0.1~esm11:4.1.48-4+deb11u2ubuntu0.1~esm2 Show 5 moreShow less1:4.1.48-4+deb11u2ubuntu0.11:4.1.48-4+deb11u2ubuntu0.1+esm11:4.1.48-4+deb11u2ubuntu0.1+esm31:4.1.48-4+deb11u2ubuntu0.21:4.1.48-4+deb11u2ubuntu0.2+esm1 | None known |
nettyUbuntu:Pro:24.04:LTS | All versions, plus listed versions 1:4.1.48-71:4.1.48-81:4.1.48-91:4.1.48-9ubuntu0.1~esm11:4.1.48-9ubuntu0.1~esm2 Show 6 moreShow less1:4.1.48-9ubuntu0.11:4.1.48-9ubuntu0.1+esm11:4.1.48-9ubuntu0.1+esm31:4.1.48-9ubuntu0.21:4.1.48-9ubuntu0.2+esm11:4.1.48-9ubuntu0.2+esm2 | None known |
nettyUbuntu:25.10 | All versions, plus listed versions 1:4.1.48-101:4.1.48-10ubuntu0.25.10.11:4.1.48-10ubuntu0.25.10.2 | None known |
nettyUbuntu:26.10 | All versions, plus listed versions 1:4.1.48-161:4.1.48-16ubuntu1 | None known |
nettyUbuntu:Pro:26.04:LTS | All versions, plus listed versions 1:4.1.48-101:4.1.48-111:4.1.48-121:4.1.48-131:4.1.48-141:4.1.48-161:4.1.48-16ubuntu0.1~esm2 | None known |
nettyopenSUSE:Tumbleweed From an advisory covering 2 CVEs | before 4.1.118-1.1 | 4.1.118-1.1 |
What each source reports
CVE List Score used 7.5
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead to a native crash. Version 4.1.118.Final contains a patch. As workaround its possible to either disable the usage of the native SSLEngine or change the code manually.
- Record
CVE-2025-24970- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2025-3996 7.5
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead to a native crash. Version 4.1.118.Final contains a patch. As workaround its possible to either disable the usage of the native SSLEngine or change the code manually.
- Record
EUVD-2025-3996- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4g8c-wm8x-jfhw 7.5
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
Impact
When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead to a native crash.
Workarounds
As workaround its possible to either disable the usage of the native SSLEngine or changing the code from:
SslContext context = ...;
SslHandler handler = context.newHandler(....);
to:
SslContext context = ...;
SSLEngine engine = context.newEngine(....);
SslHandler handler = new SslHandler(engine, ....);
- Record
GHSA-4g8c-wm8x-jfhw- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-xpw8-rcwv-8f8p 7.5
io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack
A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack.
Impact
This is a DDOS attack, any http2 server is affected and so you should update as soon as possible.
Patches
This is patched in version 4.1.100.Final.
Workarounds
A user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own Http2FrameListener implementation or an ChannelInboundHandler implementation (depending which http2 API is used).
References
- Record
GHSA-xpw8-rcwv-8f8p- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD 7.5
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead to a native crash. Version 4.1.118.Final contains a patch. As workaround its possible to either disable the usage of the native SSLEngine or change the code manually.
- Record
CVE-2025-24970- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSV 7.5
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead to a native crash. Version 4.1.118.Final contains a patch. As workaround its possible to either disable the usage of the native SSLEngine or change the code manually.
- Record
CVE-2025-24970- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
Show 49 moreShow less
OSVGHSA-4g8c-wm8x-jfhw 7.5
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
Impact
When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead to a native crash.
Workarounds
As workaround its possible to either disable the usage of the native SSLEngine or changing the code from:
SslContext context = ...;
SslHandler handler = context.newHandler(....);
to:
SslContext context = ...;
SSLEngine engine = context.newEngine(....);
SslHandler handler = new SslHandler(engine, ....);
- Record
GHSA-4g8c-wm8x-jfhw- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSVGHSA-xpw8-rcwv-8f8p 7.5
io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack
A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack.
Impact
This is a DDOS attack, any http2 server is affected and so you should update as soon as possible.
Patches
This is patched in version 4.1.100.Final.
Workarounds
A user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own Http2FrameListener implementation or an ChannelInboundHandler implementation (depending which http2 API is used).
References
- Record
GHSA-xpw8-rcwv-8f8p- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVRHLW-2026-313117b0cad7329e 9.1
Lightwell Security Advisory: netty-handler 4.1.100.Final-rhlw-00001
Red Hat Lightwell has released io.netty:netty-handler 4.1.100.Final-rhlw-00001 with backported fixes for CVE-2025-24970, CVE-2026-44249, CVE-2026-45416, CVE-2026-50010, CVE-2026-75595, and CVE-2026-75596.
CVE-2025-24970: SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
CVE-2026-44249: Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
CVE-2026-45416: Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
CVE-2026-50010: Netty's wrapping plain trust manager silently disables hostname verification
CVE-2026-75595: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext
CVE-2026-75596: Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing
This patched artifact is a drop-in replacement for io.netty:netty-handler 4.1.100.Final from Maven Central.
- Record
RHLW-2026-313117b0cad7329e- CVSS 4.0
- 9.1 Critical
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
OSVRHSA-2025:3357 7.5
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.6 security update
- Record
RHSA-2025:3357- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-13
OSVRHSA-2025:3465 7.5
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.21 security update
- Record
RHSA-2025:3465- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:4548 7.5
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update
- Record
RHSA-2025:4548- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-13
OSVRHSA-2025:4549 7.5
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update
- Record
RHSA-2025:4549- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-13
OSVRHSA-2025:4550 7.5
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.22 security update
- Record
RHSA-2025:4550- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-13
OSVROOT-APP-MAVEN-CVE-2025-24970 7.5
CVE-2025-24970 in io.root.io.netty:netty-handler - Patched by Root
Root has patched CVE-2025-24970 in the io.root.io.netty:netty-handler package for Root:Maven. Multiple fixed versions available.
- Record
ROOT-APP-MAVEN-CVE-2025-24970- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVROOT-APP-MAVEN-GHSA-xpw8-rcwv-8f8p 7.5
GHSA-xpw8-rcwv-8f8p in io.root.io.netty:netty-codec-http2 - Patched by Root
Root has patched GHSA-xpw8-rcwv-8f8p in the io.root.io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available.
- Record
ROOT-APP-MAVEN-GHSA-xpw8-rcwv-8f8p- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-24970 7.5
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead to a native crash. Version 4.1.118.Final contains a patch. As workaround its possible to either disable the usage of the native SSLEngine or change the code manually.
- Record
UBUNTU-CVE-2025-24970- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2025-1754611416No score
TuxCare security update for io.netty:netty-handler (1 CVE)
TuxCare rebuilt io.netty:netty-handler to address 1 CVE. Fixed in 4.1.115.Final-tuxcare.1.
- Record
CLSA-2025-1754611416- Updated
- 2026-11-02
OSVCLSA-2026-1775521855No score
TuxCare security update for io.netty (5 CVEs)
TuxCare rebuilt 4 io.netty packages to address 5 CVEs. Fixed in 4.1.112.Final-tuxcare.1.
- Record
CLSA-2026-1775521855- Updated
- 2026-11-02
OSVCLSA-2026-1776040407No score
TuxCare security update for io.netty (2 CVEs)
TuxCare rebuilt 2 io.netty packages to address 2 CVEs. Fixed in 4.1.63.Final-tuxcare.3.
- Record
CLSA-2026-1776040407- Updated
- 2026-11-02
OSVCLSA-2026-1776126839No score
TuxCare security update for io.netty (4 CVEs)
TuxCare rebuilt 3 io.netty packages to address 4 CVEs. Fixed in 4.1.48.Final-tuxcare.1.
- Record
CLSA-2026-1776126839- Updated
- 2026-11-10
OSVCLSA-2026-1776213240No score
TuxCare security update for io.netty (8 CVEs)
TuxCare rebuilt 4 io.netty packages to address 8 CVEs. Fixed in 4.1.49.Final-tuxcare.1.
- Record
CLSA-2026-1776213240- Updated
- 2026-11-10
OSVCLSA-2026-1776213248No score
TuxCare security update for io.netty (5 CVEs)
TuxCare rebuilt 4 io.netty packages to address 5 CVEs. Fixed in 4.1.82.Final-tuxcare.1.
- Record
CLSA-2026-1776213248- Updated
- 2026-11-10
OSVCLSA-2026-1776299668No score
TuxCare security update for io.netty (9 CVEs)
TuxCare rebuilt 6 io.netty packages to address 9 CVEs. Fixed in 4.1.58.Final-tuxcare.1.
- Record
CLSA-2026-1776299668- Updated
- 2026-11-02
OSVCLSA-2026-1776299669No score
TuxCare security update for io.netty (14 CVEs)
TuxCare rebuilt 7 io.netty packages to address 14 CVEs. Fixed in 4.1.60.Final-tuxcare.1.
- Record
CLSA-2026-1776299669- Updated
- 2026-11-10
OSVCLSA-2026-1776386120No score
TuxCare security update for io.netty (8 CVEs)
TuxCare rebuilt 6 io.netty packages to address 8 CVEs. Fixed in 4.1.75.Final-tuxcare.1.
- Record
CLSA-2026-1776386120- Updated
- 2026-11-10
OSVCLSA-2026-1776386158No score
TuxCare security update for io.netty (11 CVEs)
TuxCare rebuilt 6 io.netty packages to address 11 CVEs. Fixed in 4.1.93.Final-tuxcare.1.
- Record
CLSA-2026-1776386158- Updated
- 2026-11-10
OSVCLSA-2026-1776386159No score
TuxCare security update for io.netty (5 CVEs)
TuxCare rebuilt 5 io.netty packages to address 5 CVEs. Fixed in 4.1.73.Final-tuxcare.1.
- Record
CLSA-2026-1776386159- Updated
- 2026-11-10
OSVCLSA-2026-1776386163No score
TuxCare security update for io.netty (6 CVEs)
TuxCare rebuilt 5 io.netty packages to address 6 CVEs. Fixed in 4.1.92.Final-tuxcare.1.
- Record
CLSA-2026-1776386163- Updated
- 2026-11-10
OSVCLSA-2026-1784596264No score
TuxCare security update for io.netty (8 CVEs)
TuxCare rebuilt 5 io.netty packages to address 8 CVEs. Fixed in 4.1.117.Final-tuxcare.2.
- Record
CLSA-2026-1784596264- Updated
- 2026-11-02
OSVCLSA-2026-1787309634No score
TuxCare security update for io.netty (62 CVEs)
TuxCare rebuilt 47 io.netty packages to address 62 CVEs. Fixed in 4.1.111.Final-tuxcare.1.
- Record
CLSA-2026-1787309634- Updated
- 2026-11-02
OSVCLSA-2026-1787668954No score
TuxCare security update for io.netty (8 CVEs)
TuxCare rebuilt 7 io.netty packages to address 8 CVEs. Fixed in 4.1.79.Final-tuxcare.1.
- Record
CLSA-2026-1787668954- Updated
- 2026-11-02
OSVCLSA-2026-1789142484No score
TuxCare security update for io.netty (4 CVEs)
TuxCare rebuilt 4 io.netty packages to address 4 CVEs. Fixed in 4.1.94.Final-tuxcare.2.
- Record
CLSA-2026-1789142484- Updated
- 2026-11-02
OSVCLSA-2026-1789219944No score
TuxCare security update for io.netty (2 CVEs)
TuxCare rebuilt 2 io.netty packages to address 2 CVEs. Fixed in 4.1.108.Final-tuxcare.2.
- Record
CLSA-2026-1789219944- Updated
- 2026-11-02
OSVCLSA-2026-1789654344No score
TuxCare security update for io.netty (11 CVEs)
TuxCare rebuilt 7 io.netty packages to address 11 CVEs. Fixed in 4.1.52.Final-tuxcare.3.
- Record
CLSA-2026-1789654344- Updated
- 2026-11-02
OSVCLSA-2026-1790292157No score
TuxCare security update for io.netty (4 CVEs)
TuxCare rebuilt 3 io.netty packages to address 4 CVEs. Fixed in 4.1.43.Final-tuxcare.2.
- Record
CLSA-2026-1790292157- Updated
- 2026-11-10
OSVCLSA-2026-1790769238No score
TuxCare security update for io.netty (18 CVEs)
TuxCare rebuilt 7 io.netty packages to address 18 CVEs. Fixed in 4.1.99.Final-tuxcare.1.
- Record
CLSA-2026-1790769238- Updated
- 2026-11-10
OSVCLSA-2026-1790853416No score
TuxCare security update for io.netty (4 CVEs)
TuxCare rebuilt 4 io.netty packages to address 4 CVEs. Fixed in 4.1.107.Final-tuxcare.2.
- Record
CLSA-2026-1790853416- Updated
- 2026-11-02
OSVCLSA-2026-1791901028No score
TuxCare security update for io.netty (18 CVEs)
TuxCare rebuilt 11 io.netty packages to address 18 CVEs. Fixed in 4.1.80.Final-tuxcare.1.
- Record
CLSA-2026-1791901028- Updated
- 2026-11-10
OSVCLSA-2026-1792076326No score
TuxCare security update for io.netty (13 CVEs)
TuxCare rebuilt 6 io.netty packages to address 13 CVEs. Fixed in 4.1.42.Final-tuxcare.1.
- Record
CLSA-2026-1792076326- Updated
- 2026-11-02
OSVCLSA-2026-1792076636No score
TuxCare security update for io.netty (3 CVEs)
TuxCare rebuilt 3 io.netty packages to address 3 CVEs. Fixed in 4.1.87.Final-tuxcare.2.
- Record
CLSA-2026-1792076636- Updated
- 2026-11-02
OSVCLSA-2026-1792665099No score
TuxCare security update for io.netty (18 CVEs)
TuxCare rebuilt 7 io.netty packages to address 18 CVEs. Fixed in 4.1.96.Final-tuxcare.1.
- Record
CLSA-2026-1792665099- Updated
- 2026-11-10
OSVCLSA-2026-1792665490No score
TuxCare security update for io.netty (13 CVEs)
TuxCare rebuilt 9 io.netty packages to address 13 CVEs. Fixed in 4.1.81.Final-tuxcare.1.
- Record
CLSA-2026-1792665490- Updated
- 2026-11-02
OSVCLSA-2026-1792673710No score
TuxCare security update for io.netty (27 CVEs)
TuxCare rebuilt 15 io.netty packages to address 27 CVEs. Fixed in 4.1.72.Final-tuxcare.1.
- Record
CLSA-2026-1792673710- Updated
- 2026-11-02
OSVCLSA-2026-1792673723No score
TuxCare security update for io.netty (24 CVEs)
TuxCare rebuilt 13 io.netty packages to address 24 CVEs. Fixed in 4.1.68.Final-tuxcare.1.
- Record
CLSA-2026-1792673723- Updated
- 2026-11-10
OSVCLSA-2026-1792686520No score
TuxCare security update for io.netty (24 CVEs)
TuxCare rebuilt 13 io.netty packages to address 24 CVEs. Fixed in 4.1.114.Final-tuxcare.1.
- Record
CLSA-2026-1792686520- Updated
- 2026-11-02
OSVCLSA-2026-1792693038No score
TuxCare security update for io.netty (15 CVEs)
TuxCare rebuilt 10 io.netty packages to address 15 CVEs. Fixed in 4.1.113.Final-tuxcare.1.
- Record
CLSA-2026-1792693038- Updated
- 2026-11-02
OSVCLSA-2026-1792746051No score
TuxCare security update for io.netty (25 CVEs)
TuxCare rebuilt 14 io.netty packages to address 25 CVEs. Fixed in 4.1.53.Final-tuxcare.1.
- Record
CLSA-2026-1792746051- Updated
- 2026-11-10
OSVCLSA-2026-1792747978No score
TuxCare security update for io.netty (21 CVEs)
TuxCare rebuilt 11 io.netty packages to address 21 CVEs. Fixed in 4.1.51.Final-tuxcare.1.
- Record
CLSA-2026-1792747978- Updated
- 2026-11-02
OSVCLSA-2026-1792750988No score
TuxCare security update for io.netty (6 CVEs)
TuxCare rebuilt 6 io.netty packages to address 6 CVEs. Fixed in 4.1.76.Final-tuxcare.1.
- Record
CLSA-2026-1792750988- Updated
- 2026-11-02
OSVCLSA-2026-1792785316No score
TuxCare security update for io.netty (10 CVEs)
TuxCare rebuilt 7 io.netty packages to address 10 CVEs. Fixed in 4.1.21.Final-tuxcare.1.
- Record
CLSA-2026-1792785316- Updated
- 2026-11-02
OSVCLSA-2026-1793028420No score
TuxCare security update for io.netty (4 CVEs)
TuxCare rebuilt 3 io.netty packages to address 4 CVEs. Fixed in 4.0.56.Final-tuxcare.1.
- Record
CLSA-2026-1793028420- Updated
- 2026-11-02
OSVCLSA-2026-1793349903No score
TuxCare security update for io.netty (24 CVEs)
TuxCare rebuilt 13 io.netty packages to address 24 CVEs. Fixed in 4.1.74.Final-tuxcare.1.
- Record
CLSA-2026-1793349903- Updated
- 2026-11-02
OSVCLSA-2026-1793709318No score
TuxCare security update for io.netty (12 CVEs)
TuxCare rebuilt 8 io.netty packages to address 12 CVEs. Fixed in 4.1.101.Final-tuxcare.2.
- Record
CLSA-2026-1793709318- Updated
- 2026-11-03
OSVCLSA-2026-1793772491No score
TuxCare security update for io.netty (2 CVEs)
TuxCare rebuilt 2 io.netty packages to address 2 CVEs. Fixed in 4.1.29.Final-tuxcare.4.
- Record
CLSA-2026-1793772491- Updated
- 2026-11-04
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, affected_more, aliases | OSV | |
| affected_more | OSV | |
| affected_more, aliases | OSV | |
| affected | ||
| affected_more, aliases | OSV | |
| affected_more, aliases | OSV | |
| affected_more, aliases, facts | OSV | |
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
github.com/netty/netty/security/advisories/GHSA-4g8c-wm8x-jfhw
github.com/netty/netty/commit/87f40725155b2f89adfde68c7732f97c153676c4
security.netapp.com/advisory/ntap-20250221-0005
vicarius.io/vsociety/posts/cve-2025-24970-netty-vulnerability-detection
vicarius.io/vsociety/posts/cve-2025-24970-netty-vulnerability-mitigation
nvd.nist.gov/vuln/detail/CVE-2025-24970
Show 127 moreShow less
github.com/advisories/GHSA-4g8c-wm8x-jfhw
github.com/netty/netty/security/advisories/GHSA-xpw8-rcwv-8f8p
github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3
nvd.nist.gov/vuln/detail/CVE-2023-44487
cve.org/CVERecord?id=CVE-2023-44487
github.com/advisories/GHSA-xpw8-rcwv-8f8p
github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24970.json
github.com/netty/netty
github.com/netty/netty/releases/tag/netty-4.1.135.Final
github.com/netty/netty/releases/tag/netty-4.2.15.Final
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44249.json
access.redhat.com/errata/RHSA-2026:26017
access.redhat.com/errata/RHSA-2026:26018
access.redhat.com/errata/RHSA-2026:26586
access.redhat.com/errata/RHSA-2026:28573
access.redhat.com/errata/RHSA-2026:34608
access.redhat.com/errata/RHSA-2026:36820
access.redhat.com/errata/RHSA-2026:37390
access.redhat.com/errata/RHSA-2026:41951
access.redhat.com/errata/RHSA-2026:48124
access.redhat.com/errata/RHSA-2026:48151
access.redhat.com/errata/RHSA-2026:49700
access.redhat.com/errata/RHSA-2026:49701
access.redhat.com/errata/RHSA-2026:50085
access.redhat.com/errata/RHSA-2026:53644
access.redhat.com/errata/RHSA-2026:53645
access.redhat.com/errata/RHSA-2026:53646
access.redhat.com/errata/RHSA-2026:54435
access.redhat.com/errata/RHSA-2026:65126
access.redhat.com/errata/RHSA-2026:66488
access.redhat.com/errata/RHSA-2026:66545
access.redhat.com/security/cve/CVE-2026-44249
github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44249.json
github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86
nvd.nist.gov/vuln/detail/CVE-2026-44249
github.com/advisories/GHSA-3qp7-7mw8-wx86
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45416.json
access.redhat.com/errata/RHSA-2026:62260
access.redhat.com/security/cve/CVE-2026-45416
github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45416.json
github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh
nvd.nist.gov/vuln/detail/CVE-2026-45416
github.com/advisories/GHSA-x4gw-5cx5-pgmh
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-50010.json
access.redhat.com/security/cve/CVE-2026-50010
github.com/CVEProject/cvelistV5/tree/main/cves/2026/50xxx/CVE-2026-50010.json
github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9
nvd.nist.gov/vuln/detail/CVE-2026-50010
github.com/advisories/GHSA-c653-97m9-rcg9
github.com/netty/netty/releases/tag/netty-4.1.137.Final
github.com/netty/netty/releases/tag/netty-4.2.17.Final
github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75595.json
github.com/netty/netty/security/advisories/GHSA-c4c3-7fpv-j4q5
nvd.nist.gov/vuln/detail/CVE-2026-75595
github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7
github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961
github.com/netty/netty/pull/17213
github.com/netty/netty/pull/17217
github.com/advisories/GHSA-c4c3-7fpv-j4q5
github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75596.json
github.com/netty/netty/security/advisories/GHSA-fccg-mwvh-qqg4
nvd.nist.gov/vuln/detail/CVE-2026-75596
github.com/advisories/GHSA-fccg-mwvh-qqg4
access.redhat.com/errata/RHSA-2025:3357
access.redhat.com/security/updates/classification
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/8.0
access.redhat.com/articles/7109353
bugzilla.redhat.com/show_bug.cgi?id=2325538
bugzilla.redhat.com/show_bug.cgi?id=2335206
bugzilla.redhat.com/show_bug.cgi?id=2344787
bugzilla.redhat.com/show_bug.cgi?id=2344788
issues.redhat.com/browse/JBEAP-29540
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3357.json
access.redhat.com/security/cve/CVE-2024-8447
cve.org/CVERecord?id=CVE-2024-8447
nvd.nist.gov/vuln/detail/CVE-2024-8447
github.com/jbosstm/narayana/pull/2293
access.redhat.com/security/cve/CVE-2024-47535
cve.org/CVERecord?id=CVE-2024-47535
nvd.nist.gov/vuln/detail/CVE-2024-47535
github.com/netty/netty/commit/fbf7a704a82e7449b48bd0bbb679f5661c6d61a3
github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv
access.redhat.com/security/cve/CVE-2025-24970
cve.org/CVERecord?id=CVE-2025-24970
access.redhat.com/security/cve/CVE-2025-25193
cve.org/CVERecord?id=CVE-2025-25193
nvd.nist.gov/vuln/detail/CVE-2025-25193
github.com/netty/netty/commit/d1fbda62d3a47835d3fb35db8bd42ecc205a5386
github.com/netty/netty/security/advisories/GHSA-389x-839f-4rhx
access.redhat.com/errata/RHSA-2025:3465
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index
bugzilla.redhat.com/show_bug.cgi?id=2337620
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3465.json
access.redhat.com/security/cve/CVE-2025-23367
cve.org/CVERecord?id=CVE-2025-23367
nvd.nist.gov/vuln/detail/CVE-2025-23367
github.com/advisories/GHSA-qr6x-62gq-4ccp
access.redhat.com/errata/RHSA-2025:4548
issues.redhat.com/browse/JBEAP-28786
issues.redhat.com/browse/JBEAP-28808
issues.redhat.com/browse/JBEAP-28843
issues.redhat.com/browse/JBEAP-28989
issues.redhat.com/browse/JBEAP-29003
issues.redhat.com/browse/JBEAP-29311
issues.redhat.com/browse/JBEAP-29488
issues.redhat.com/browse/JBEAP-29539
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4548.json
access.redhat.com/security/cve/CVE-2024-47554
bugzilla.redhat.com/show_bug.cgi?id=2316271
cve.org/CVERecord?id=CVE-2024-47554
nvd.nist.gov/vuln/detail/CVE-2024-47554
lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1
access.redhat.com/errata/RHSA-2025:4549
issues.redhat.com/browse/JBEAP-28809
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4549.json
access.redhat.com/errata/RHSA-2025:4550
issues.redhat.com/browse/JBEAP-28810
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4550.json
suse.com/support/update/announcement/2025/suse-su-20250590-1
bugzilla.suse.com/1237037
bugzilla.suse.com/1237038
suse.com/security/cve/CVE-2025-24970
suse.com/security/cve/CVE-2025-25193
ubuntu.com/security/CVE-2025-24970
lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I2HNCBXXEMWJF2YKXVEZR6N73V6QWIFP
Left out here: 74 package rows and 206 versions. The JSON record has them. Also not on the record: 160 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 10 source records.