CLSA-2026-1787650786 TuxCare security update for io.netty (4 CVEs)

🗓️ 25 Aug 2026 09:39:46Reported by GoogleType

osv🔗 osv.dev👁 11 Views

TuxCare fixed 4 CVEs in io.netty, resolved in 4.1.48.Final-tuxcare.2.

Reporter	Title	Published	Views	Family All 508
IBM Security Bulletins	Security Bulletin: IBM Spectrum Scale Transparent Cloud Tiering is affected by a vulnerability which can cause denial of service (CVE-2022-41881)	2 May 202312:17	–	ibm
IBM Security Bulletins	Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability CVE-2021-37136 in Netty netty-codec	28 Sep 202207:55	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance	12 Aug 202608:51	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to command injection due to the Netty package (CVE-2025-59419)	13 Jan 202616:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® Graph	24 Apr 202322:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty affect watsonx.data	3 Sep 202420:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	18 Dec 202501:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Netty affect Apache Solr, Apache Zookeeper and Logstash shipped with IBM Operations Analytics - Log Analysis	6 Sep 202408:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty affect watsonx.data	25 Sep 202418:55	–	ibm
IBM Security Bulletins	Security Bulletin: SMTP Command Injection Vulnerability in Netty SMTP Codec (Fixed in 4.1.129.Final and 4.2.8.Final) affect IBM watsonx.data	4 Mar 202615:28	–	ibm

25 Aug 2026 23:49Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 3.15.3 - 7.5

CVSS 46.9

EPSS0.05908

SSVC

io.netty TuxCare security update 4.1.48.Final multiple CVEs