SUSE SLED15 / SLES15 Security Update : netty, netty-tcnative (SUSE-SU-2026:3482-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3482-1 advisory. Upgrade netty to upstream version 4.1.136 and netty-tcnative to version 2.0.80 Final. Security issues fixed -...

Improper Authorization io.netty:netty-handler Dependency in Jira Service Management Data Center

This High severity Improper Authorization vulnerability was introduced in versions 5.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 8.1...

DoS (Denial of Service) io.netty:netty-handler Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 5.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 a...

DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Jira Service Management Data Center

This High severity DoS Denial of Service vulnerability was introduced in versions 5.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.12, 10.4.0, 10.5.0, 10.6.1, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5...

MITM (Man-in-the-Middle) io.netty:netty-handler Dependency in Jira Service Management Data Center and Server

This MITM Man-in-the-Middle vulnerability was introduced in versions 5.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center and Server. This MITM Man-in-the-Middle vulnerability, with a CVSS Score of 7.5 an...

CLSA-2026-1784769563 TuxCare security update for io.projectreactor.netty (1 CVE)

TuxCare rebuilt 4 io.projectreactor.netty packages to address 1 CVE. Fixed in 1.0.7-tuxcare.2...

CLSA-2026-1783645392 TuxCare security update for io.projectreactor.netty (1 CVE)

TuxCare rebuilt 4 io.projectreactor.netty packages to address 1 CVE. Fixed in 1.0.39-tuxcare.2...

CLSA-2026-1783991057 TuxCare security update for io.netty (5 CVEs)

TuxCare rebuilt 47 io.netty packages to address 5 CVEs. Fixed in 4.1.92.Final-tuxcare.4...

CLSA-2026-1783645399 TuxCare security update for io.projectreactor.netty (1 CVE)

TuxCare rebuilt 4 io.projectreactor.netty packages to address 1 CVE. Fixed in 1.0.32-tuxcare.3...

CLSA-2026-1783386140 TuxCare security update for io.netty (5 CVEs)

TuxCare rebuilt 47 io.netty packages to address 5 CVEs. Fixed in 4.1.93.Final-tuxcare.2...

CLSA-2026-1777596012 TuxCare security update for io.netty:netty (6 CVEs)

TuxCare rebuilt io.netty:netty to address 6 CVEs. Fixed in 3.10.6.Final-tuxcare.1...

CLSA-2026-1776299668 TuxCare security update for io.netty (9 CVEs)

TuxCare rebuilt 42 io.netty packages to address 9 CVEs. Fixed in 4.1.58.Final-tuxcare.1...

CLSA-2026-1776386120 TuxCare security update for io.netty (9 CVEs)

TuxCare rebuilt 46 io.netty packages to address 9 CVEs. Fixed in 4.1.75.Final-tuxcare.1...

CLSA-2026-1776213248 TuxCare security update for io.netty (6 CVEs)

TuxCare rebuilt 46 io.netty packages to address 6 CVEs. Fixed in 4.1.82.Final-tuxcare.1...

CLSA-2026-1768435721 TuxCare security update for io.projectreactor.netty (4 CVEs)

TuxCare rebuilt 4 io.projectreactor.netty packages to address 4 CVEs. Fixed in 1.0.23-tuxcare.1...

CLSA-2026-1768781329 TuxCare security update for io.projectreactor.netty (1 CVE)

TuxCare rebuilt 4 io.projectreactor.netty packages to address 1 CVE. Fixed in 1.1.15-tuxcare.1...

CLSA-2026-1767744512 TuxCare security update for io.projectreactor.netty (2 CVEs)

TuxCare rebuilt 4 io.projectreactor.netty packages to address 2 CVEs. Fixed in 1.0.32-tuxcare.1...

CLSA-2025-1763424415 TuxCare security update for io.projectreactor.netty (1 CVE)

TuxCare rebuilt 4 io.projectreactor.netty packages to address 1 CVE. Fixed in 1.0.39-tuxcare.1...

netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended...

netty-codec-http2: Netty: Denial of Service due to HTTP/2 max header size handling

A flaw was found in Netty, a network application framework. A remote attacker can exploit a vulnerability in the HTTP/2 Hypertext Transfer Protocol version 2 maximum header size handling. By sending a specific SETTINGSMAXHEADERLISTSIZE setting, an attacker can cause Netty to produce an exception...