@chrisvest.mastodon.social.ap.brid.gyWe've released Netty 4.2.19 and 4.1.139, which include multiple bug- and security fixes:
- https://netty.io/news/2026/10/06/4-2-19-Final.html
- https://netty.io/news/2026/10/06/4-1-139-Final.html
Note that Netty 4.1.x will be EOL on July 1st, 2027.
#netty #java
@hugovalters.bsky.socialCVE-2026-93579: Netty HTTP/2 header validation flaw enables request smuggling and header injection via NUL/LF/CR chars. CVSS 6.5, no patch yet. Audit your HTTP/2 proxies. https://www.valtersit.com/cve/CVE-2026-93579/ #CVE #infosec #Netty
@stackflag.bsky.socialCVE-2026-47691 - netty
The Netty DNS resolver library used in Java applications can be exploited to run unauthorized code on a server. This could let attackers take control of the affected system. Apply the…
Too many irrelevant or confusing CVEs? Use stackflag.com
@hugovalters.bsky.socialNetty: 70 CVEs but 0 exploited in the wild? Yet 45% remain unpatched and 8.7 max severity. High-risk CWE-400 issues spike +51 in 2025 - don't ignore async flaws. Trust Score B. Protect your Java stack. https://www.valtersit.com/vendors/netty/ #cybersecurity #infosec #Netty
@chrisvest.mastodon.social.ap.brid.gyWe've released Netty 4.2.18 and 4.1.138, which contain multiple bug- and security-fixes:
- https://netty.io/news/2026/09/09/4-2-18-Final.html
- https://netty.io/news/2026/09/09/4-1-138-Final.html
#netty #java
@chrisvest.mastodon.social.ap.brid.gyNetty 4.1 will be End-of-Life on July 1st, 2027.
See our announcement post: https://netty.io/news/2026/09/09/4-1-EOL-announcement.html