CLEANSTART-2026-JK70827 Security fixes in elasticsearch 9.3.7-r1

Package elasticsearch version 9.3.7-r1 fixes 5 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-41715, CVE-2026-42579, CVE-2026-45536...

ROOT-APP-MAVEN-CVE-2026-45536 CVE-2026-45536 in io.root.io.netty:netty-transport-native-epoll - Patched by Root

Root has patched CVE-2026-45536 in the io.root.io.netty:netty-transport-native-epoll package for Root:Maven. Multiple fixed versions available...

CVE-2026-45536 Netty: Unix-socket fd receive leaks descriptors when peer sends two at once

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, nettyunixsocketrecvFd sets msgcontrol to char controlCMSGSPACEsizeofint line 940 — 24 bytes on 64-bit Linux. A peer-sent SCMRIGHTS cmsg carrying two ints has...

Linux Distros Unpatched Vulnerability : CVE-2026-45536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, nettyunixsocketrecvF...

CVE-2026-45536 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, cassandra, tez, s3proxy-fips, strimzi-kafka-operator, apache-hop, management-api-for-apache-cassandra-4.0, spark-kubernetes-operator-fips, apache-pulsar-fips, localstack, management-api-for-apache-cassandra-4.1, pinot-fips, spark-kubernetes-operator,...