Security Bulletin: There is a vulnerability in netty-resolver-dns-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-45673, CVE-2026-45674, CVE-2026-47691)

Summary There is a vulnerability in netty-resolver-dns-4.1.133.Final.jar used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2026-45673 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior t...

Important: Red Hat Security Advisory: Red Hat build of Apache Camel 4.18 for Quarkus 3.33 security update

A security update for Red Hat build of Apache Camel 4.18 for Quarkus 3.33 is now available. This text-only errata provides information about enhancements that improve your developer experience and ensure the security and stability of your applications. Red Hat Product Security has rated this upda...

SUSE CVE-2026-45674

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue...

CVE-2026-45674

creationtimestamp| type| source ---|---|--- 2026-06-14 10:02:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moaj5jy7g32v 2026-06-15 03:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moce77eius2t 2026-06-15 16:32:32+00:00| seen|...

DEBIAN-CVE-2026-45674

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue...

CVE-2026-45674 vulnerabilities

Vulnerabilities for packages: s3proxy-fips, keycloak-fips, infinispan, request-9047-keycloak-fips, spark-kubernetes-operator-fips, apache-nifi, hadoop-fips, airbyte-server-fips, elasticsearch-fips, s3proxy, opensearch-fips, akhq, selenium, seata, knative-kafka-broker, kayenta-fips, pinot-fips,...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +3718 more potentially affected by CVE-2026-45674 via io.netty:netty-resolver-dns (>=4.2.0.final, <=4.2.14.final)

io.netty:netty-resolver-dns MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-45674 Source advisory: SNYK:JAVA-IONETTY-17262734...