Information on source package netty

Available versions

ReleaseVersion
bookworm1:4.1.48-7+deb12u2
trixie1:4.1.48-10+deb13u1
forky1:4.1.48-16
sid1:4.1.48-16

Open issues

BugbookwormtrixieforkysidDescription
CVE-2026-93579vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's HTTP/2 stack. This vulnerability allows a ...
CVE-2026-93578vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's Online Certificate Status Protocol (OCSP) ...
CVE-2026-93576vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty netty-codec-smtp. The component does not pro ...
CVE-2026-93575vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's MqttDecoder. An unauthenticated remote att ...
CVE-2026-93574vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's `netty-codec-http` component. A remote att ...
CVE-2026-93573vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's HTTP/1.1 decoder. This vulnerability allow ...
CVE-2026-93572vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's `RedisArrayAggregator` component. A remote ...
CVE-2026-93569vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty. A remote unauthenticated attacker can explo ...
CVE-2026-93568vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty. A remote attacker could exploit this vulner ...
CVE-2026-93567vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNE ...
CVE-2026-93566vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty. A remote attacker could exploit this by sen ...
CVE-2026-93565vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty RtspDecoder. The `RtspMethods.valueOf()` fun ...
CVE-2026-93564vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty. A reference-count leak in the HAProxy PROXY ...
CVE-2026-93563vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's `SmtpResponseDecoder` component. A remote ...
CVE-2026-93562vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's HTTP/1 decoder. Incomplete validation of m ...
CVE-2026-93561vulnerablevulnerablevulnerablevulnerableA flaw was found in io.netty/netty-codec-memcache. The Memcache binary ...
CVE-2026-93560vulnerablevulnerablevulnerablevulnerableA flaw was found in the Netty STOMP codec. A remote attacker could sen ...
CVE-2026-93558vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's WebSocketServerExtensionHandler. A remote, ...
CVE-2026-93494vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's StompSubframeDecoder component. A remote a ...
CVE-2026-93493vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's `netty-handler-ssl-ocsp` component. A remo ...
CVE-2026-93492vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can ...
CVE-2026-93491vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty's HttpServerCodec. A remote, unauthenticated ...
CVE-2026-93488vulnerablevulnerablevulnerablevulnerableA flaw was found in Netty. SpdySessionHandler accepts an unlimited num ...
CVE-2026-89044vulnerablevulnerablevulnerablevulnerableNetty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final th ...
CVE-2026-76816vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-75596vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-75595vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-73508vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-73507vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-62380vulnerablevulnerablevulnerablevulnerableNetty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16 ...
CVE-2026-62243vulnerablevulnerablevulnerablevulnerableNetty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.1 ...
CVE-2026-59921vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-59920vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-59919vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-59903vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-59902vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-59901vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-59900vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-59899vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-59898vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-56822vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-56821vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-56820vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-56819vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-56818vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-56817vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-56816vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-56746vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-56745vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-55851vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-55833vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-55831vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-50560vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-50020vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-50011vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-50010vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-50009vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-48748vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-48059vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-48043vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-48006vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-47691vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-47244vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-46340vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-45674vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-45673vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-45536vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-45416vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-44894vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-44893vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-44892vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-44891vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-44890vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-44250vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-44249vulnerablevulnerablevulnerablevulnerableNetty is a network application framework for development of protocol s ...
CVE-2026-44248vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-42587vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-42586vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-42585vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-42584vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-42583vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-42582vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-42581vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-42580vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-42579vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-42578vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-42577vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-41417vulnerablevulnerablevulnerablevulnerableNetty allows request-line validation to be bypassed when a `DefaultHtt ...
CVE-2026-33871vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...
CVE-2026-33870vulnerablevulnerablevulnerablevulnerableNetty is an asynchronous, event-driven network application framework. ...

Open unimportant issues

BugbookwormtrixieforkysidDescription
CVE-2022-24823vulnerablevulnerablevulnerablevulnerableNetty is an open-source, asynchronous event-driven network application ...

Resolved issues

BugDescription
CVE-2025-67735Netty is an asynchronous, event-driven network application framework. ...
CVE-2025-59419Netty is an asynchronous, event-driven network application framework. ...
CVE-2025-58057Netty is an asynchronous event-driven network application framework fo ...
CVE-2025-58056Netty is an asynchronous event-driven network application framework fo ...
CVE-2025-55163Netty is an asynchronous, event-driven network application framework. ...
CVE-2025-25193Netty, an asynchronous, event-driven network application framework, ha ...
CVE-2025-24970Netty, an asynchronous, event-driven network application framework, ha ...
CVE-2024-47535Netty is an asynchronous event-driven network application framework fo ...
CVE-2024-29025Netty is an asynchronous event-driven network application framework fo ...
CVE-2023-44487The HTTP/2 protocol allows a denial of service (server resource consum ...
CVE-2023-34462Netty is an asynchronous event-driven network application framework fo ...
CVE-2022-41915Netty project is an event-driven asynchronous network application fram ...
CVE-2022-41881Netty project is an event-driven asynchronous network application fram ...
CVE-2021-43797Netty is an asynchronous event-driven network application framework fo ...
CVE-2021-37137The Snappy frame decoder function doesn't restrict the chunk length wh ...
CVE-2021-37136The Bzip2 decompression decoder function doesn't allow setting size re ...
CVE-2021-21409Netty is an open-source, asynchronous event-driven network application ...
CVE-2021-21295Netty is an open-source, asynchronous event-driven network application ...
CVE-2021-21290Netty is an open-source, asynchronous event-driven network application ...
CVE-2020-11612The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memo ...
CVE-2020-7238Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles ...
CVE-2019-20445HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length ...
CVE-2019-20444HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header th ...
CVE-2019-16869Netty before 4.1.42.Final mishandles whitespace before the colon in HT ...
CVE-2016-4970handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and ...
CVE-2015-2156Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0 ...
CVE-2014-3488The SslHandler in Netty before 3.9.2 allows remote attackers to cause ...
CVE-2014-0193WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7. ...

Security announcements

DSA / DLADescription
DLA-4519-1netty - security update
DSA-6160-1netty - security update
DLA-3834-1netty - security update
DLA-3656-1netty - security update
DSA-5558-1netty - security update
DSA-5316-1netty - security update
DLA-3268-1netty - security update
DSA-4885-1netty - security update
DLA-2555-1netty - security update
DLA-2364-1netty - security update
DLA-2109-1netty - security update
DSA-4597-1netty - security update
DLA-1941-1netty - security update

Search for package or bug name: Reporting problems