CVE-2026-93564 Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)

[
  {
    "vendor": "Red Hat",
    "product": "Red Hat Build of Apache Camel 3.33.3.SP2",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "io.netty/netty-codec-haproxy",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "4.1.138.Final-redhat-00001",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:apache_camel_quarkus:3.33"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Build of Debezium 3.6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "unaffected",
    "packageName": "netty-codec-haproxy",
    "cpes": [
      "cpe:/a:redhat:debezium:3.6"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat build of Quarkus 3.27.5.SP2",
    "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
    "defaultStatus": "unaffected",
    "packageName": "netty-codec-haproxy",
    "cpes": [
      "cpe:/a:redhat:quarkus:3.27::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat build of Quarkus 3.33.3.SP2",
    "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
    "defaultStatus": "unaffected",
    "packageName": "netty-codec-haproxy",
    "cpes": [
      "cpe:/a:redhat:quarkus:3.33::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat AMQ Broker 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "netty-codec-haproxy",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:amq_broker:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat build of Apache Camel 4 for Quarkus 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "netty-codec-haproxy",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:camel_quarkus:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat build of Apache Camel for Spring Boot 4",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "netty-codec-haproxy",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:camel_spring_boot:4"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat build of Apicurio Registry 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "netty-codec-haproxy",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:apicurio_registry:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Build of Keycloak",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "netty-codec-haproxy",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:build_keycloak:"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Fuse 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "netty-codec-haproxy",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:jboss_fuse:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat JBoss Enterprise Application Platform 7",
    "collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
    "packageName": "netty-codec-haproxy",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:jboss_enterprise_application_platform:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Single Sign-On 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "netty-codec-haproxy",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:red_hat_single_sign_on:7"
    ]
  }
]