Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The content-length header is not correctly validated if the request only uses a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. This is a followup of GHSA-wm47-8v5p-wjpj/CVE-2021-21295 which did miss to fix this one case. This was fixed as part of 4.1.61.Final.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-little-pluggerUpgrade rubygem-netrcUpgrade rubygem-unicode-display_widthUpgrade rubygem-apipie-bindingsUpgrade satellite-maintainUpgrade tfm-rubygem-domain_nameUpgrade tfm-rubygem-http-cookieUpgrade foreman-cliUpgrade tfm-rubygem-fast_gettextUpgrade rubygem-clampUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-rest-clientUpgrade rubygem-unf_ext-debuginfoUpgrade tfm-runtimeUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade satellite-cliUpgrade tfm-rubygem-jwtUpgrade tfm-rubygem-localeUpgrade rubygem-mime-types-dataUpgrade rubygem-hashieUpgrade rubygem-rest-clientUpgrade rubygem-foreman_maintainUpgrade rubygem-oauthUpgrade tfm-rubygem-clampUpgrade tfm-rubygem-netrcUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-oauthUpgrade rubygem-hammer_cli_foreman_adminUpgrade tfm-rubygem-unicodeUpgrade rubygem-unfUpgrade rubygem-unf_ext-debugsourceUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-highlineUpgrade satellite-cloneUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-localeUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-mime-typesUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-multi_jsonUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-amazing_printUpgrade tfm-rubygem-powerbarUpgrade rubygem-jwtUpgrade tfm-rubygem-unf_extUpgrade tfm-rubygem-mime-typesUpgrade tfm-rubygem-amazing_printUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-loggingUpgrade rubygem-domain_nameUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_katelloUpgrade tfm-rubygem-loggingUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-unicode-debugsource | Jul 14, 2022 | Mar 30, 2021 |
| Debian | — | Upgrade netty | Apr 7, 2021 | Mar 30, 2021 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 30, 2021 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Mar 30, 2021 |
| Redhat_linux | — | Upgrade tfm-rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-unicode-display_widthUpgrade tfm-rubygem-domain_nameUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unfUpgrade tfm-rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-oauthUpgrade tfm-rubygem-unf_extUpgrade rubygem-unicode-debugsourceUpgrade tfm-rubygem-hammer_cliUpgrade tfm-rubygem-hammer_cli_foremanUpgrade rubygem-rest-clientUpgrade rubygem-apipie-bindingsUpgrade tfm-rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-display_widthUpgrade tfm-rubygem-localeUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade satellite-maintainUpgrade tfm-rubygem-multi_jsonUpgrade rubygem-multi_jsonUpgrade rubygem-mime-types-dataUpgrade tfm-rubygem-hammer_cli_foreman_adminUpgrade rubygem-little-pluggerUpgrade tfm-rubygem-powerbarUpgrade tfm-rubygem-rest-clientUpgrade rubygem-jwtUpgrade tfm-rubygem-clampUpgrade satellite-cloneUpgrade tfm-rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-netrcUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_templatesUpgrade tfm-rubygem-hammer_cli_foreman_remote_executionUpgrade tfm-rubygem-fast_gettextUpgrade tfm-rubygem-hammer_cli_foreman_ansibleUpgrade tfm-rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hashieUpgrade rubygem-foreman_maintainUpgrade tfm-rubygem-unf_ext-debuginfoUpgrade tfm-rubygem-loggingUpgrade rubygem-hammer_cli_foreman_openscapUpgrade tfm-rubygem-unfUpgrade tfm-rubygem-http-cookieUpgrade rubygem-loggingUpgrade rubygem-hammer_cliUpgrade tfm-rubygem-oauthUpgrade tfm-rubygem-highlineUpgrade tfm-rubygem-hammer_cli_foreman_templatesUpgrade rubygem-http-cookieUpgrade tfm-rubygem-hammer_cli_foreman_tasksUpgrade tfm-rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-fast_gettextUpgrade tfm-rubygem-hashieUpgrade rubygem-hammer_cli_foreman_adminUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-domain_nameUpgrade tfm-rubygem-mime-typesUpgrade rubygem-unf_extUpgrade tfm-runtimeUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-amazing_printUpgrade tfm-rubygem-little-pluggerUpgrade tfm-rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade tfm-rubygem-netrcUpgrade rubygem-highlineUpgrade tfm-rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade tfm-rubygem-hammer_cli_katelloUpgrade tfm-rubygem-amazing_printUpgrade satellite-cliUpgrade rubygem-powerbarUpgrade rubygem-localeUpgrade tfm-rubygem-unicodeUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-mime-typesUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_ansible | Jul 14, 2022 | Mar 30, 2021 |
| Rocky_linux | — | Upgrade libdb-sql-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | Mar 30, 2021 |
| Suse | — | Upgrade netty-pomsUpgrade netty-javadocUpgrade netty | Oct 26, 2022 | Mar 30, 2021 |
| Ubuntu | — | Upgrade libnetty-java (Ubuntu Pro)Upgrade libnetty-java | May 1, 2023 | Mar 30, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 30, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub