Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The content-length header is not correctly validated if the request only uses a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. This is a followup of GHSA-wm47-8v5p-wjpj/CVE-2021-21295 which did miss to fix this one case. This was fixed as part of 4.1.61.Final.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tfm-rubygem-mime-typesUpgrade rubygem-amazing_printUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-highlineUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicodeUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-unicode-display_widthUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-unicode-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-debuginfoUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-mime-typesUpgrade tfm-rubygem-powerbarUpgrade rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-hashieUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-localeUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-loggingUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unf_extUpgrade rubygem-domain_nameUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-netrcUpgrade satellite-cloneUpgrade rubygem-rest-clientUpgrade tfm-rubygem-http-cookieUpgrade tfm-rubygem-clampUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-foreman_maintainUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-domain_nameUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-rest-clientUpgrade tfm-rubygem-oauthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-runtimeUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-unicode-display_widthUpgrade rubygem-netrcUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unfUpgrade rubygem-powerbarUpgrade satellite-cliUpgrade tfm-rubygem-unicodeUpgrade rubygem-highlineUpgrade foreman-cliUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-jwtUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-mime-types-dataUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_tasksUpgrade satellite-maintain | Jul 14, 2022 | Mar 30, 2021 |
| Debian | — | Upgrade netty | Apr 7, 2021 | Mar 30, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 30, 2021 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 30, 2021 |
| Redhat_linux | — | Upgrade tfm-rubygem-hashieUpgrade rubygem-unf_extUpgrade tfm-rubygem-little-pluggerUpgrade rubygem-hashieUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-cookieUpgrade tfm-runtimeUpgrade rubygem-powerbarUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-http-cookieUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-highlineUpgrade rubygem-clampUpgrade rubygem-mime-typesUpgrade tfm-rubygem-unicodeUpgrade satellite-cliUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-amazing_printUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-highlineUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-unfUpgrade rubygem-domain_nameUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-localeUpgrade tfm-rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-jwtUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-unicodeUpgrade rubygem-unicode-debuginfoUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foremanUpgrade tfm-rubygem-rest-clientUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-debugsourceUpgrade satellite-cloneUpgrade rubygem-unfUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-unf_extUpgrade rubygem-hammer_cli_foremanUpgrade tfm-rubygem-localeUpgrade tfm-rubygem-jwtUpgrade rubygem-rest-clientUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-clampUpgrade satellite-maintainUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-multi_jsonUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-hammer_cli_foreman_remote_execution | Jul 14, 2022 | Mar 30, 2021 |
| Rocky_linux | — | Upgrade libdb-sql-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | Mar 30, 2021 |
| Suse | — | Upgrade netty-pomsUpgrade netty-javadocUpgrade netty | Oct 26, 2022 | Mar 30, 2021 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro)Upgrade libnetty-java | May 1, 2023 | Mar 30, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 30, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub