CLSA-2026-1787049848 TuxCare security update for io.netty (23 CVEs)

🗓️ 18 Aug 2026 10:44:08Reported by GoogleType

osv_clsa🔗 osv.dev👁 9 Views

TuxCare patched 21 CVEs in io.netty, updating to 4.1.130.Final-tuxcare.3.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	20 Aug 202615:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities reported in netty-codec-4.1.135.Final.jar for APIM	4 Oct 202617:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty.Spring WebFlux,Spring Framework,Bootstrap,Angular,Lodash,spring-security-config,Underscore might affect IBM Storage Defender Copy Data Management	30 Sep 202617:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a memory leak in Netty (CVE-2026-73508)	22 Oct 202619:59	–	ibm
IBM Security Bulletins	Security Bulletin:Netty Bzip2Decoder Handler Vulnerability: Denial of Service via Malformed bzip2 Stream	7 Oct 202617:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-codec-http-4.1.135.Final.jar	15 Sep 202620:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Informix Wire Listener is affected by a vulnerability in the third-party Netty library (CVE-2026-59900).	26 Aug 202607:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	30 Jul 202606:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities were addressed in IBM DataStax Enterprise 6.9.26	12 Oct 202611:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty	19 Aug 202618:05	–	ibm

15 Oct 2026 09:46Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17.5 - 9.8

CVSS 48.7

EPSS0.00793

SSVC

io.netty CVE security update TuxCare library