{
  "fix": "SUSE-SU-2026:3482-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3482-1",
  "summary": "SUSE-SU-2026:3482-1, released August 4, 2026, fixes 19 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 2 packages",
  "released": "2026-08-04T11:46:42Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2026-55833, high severity",
  "supported": true,
  "cveCount": 19,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00728,
  "maxCvss": 7.5,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:3482-1",
  "appliesTo": [
    {
      "product": "netty",
      "productUrl": "https://patchblox.com/security/product/linux/netty",
      "release": "sles 15.7",
      "fixedVersion": "4.1.136-150200.4.53.1",
      "supported": true
    },
    {
      "product": "netty-tcnative",
      "productUrl": "https://patchblox.com/security/product/linux/netty-tcnative",
      "release": "sles 15.6",
      "fixedVersion": "2.0.80-150200.3.48.1",
      "supported": true
    },
    {
      "product": "netty-tcnative",
      "productUrl": "https://patchblox.com/security/product/linux/netty-tcnative",
      "release": "sles 15.7",
      "fixedVersion": "2.0.80-150200.3.48.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-55831",
      "url": "https://patchblox.com/security/cve/CVE-2026-55831",
      "title": "netty-tcnative: resource exhaustion/DoS in \u0060io.netty:netty-codec-http\u0060 (bsc#1271960).",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00665,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-55833",
      "url": "https://patchblox.com/security/cve/CVE-2026-55833",
      "title": "netty-tcnative: zip bomb in \u0060io.netty:netty-codec-http\u0060 (bsc#1271961).",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00665,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-56745",
      "url": "https://patchblox.com/security/cve/CVE-2026-56745",
      "title": "netty-tcnative: memory exhaustion in \u0060io.netty:netty-codec-http\u0060 (bsc#1272254).",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.0063,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-59899",
      "url": "https://patchblox.com/security/cve/CVE-2026-59899",
      "title": "netty-tcnative: memory exhaustion in \u0060io.netty:netty-codec-http\u0060 (bsc#1272301).",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00609,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-56746",
      "url": "https://patchblox.com/security/cve/CVE-2026-56746",
      "title": "netty-tcnative: improper access control in \u0060io.netty:netty-codec-http\u0060 (CORS) (bsc#1272255).",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.00408,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-44891",
      "url": "https://patchblox.com/security/cve/CVE-2026-44891",
      "title": "netty-tcnative: memory exhaustion in \u0060io.netty:netty-codec-stomp\u0060 (bsc#1271435).",
      "priority": "Routine",
      "epss": 0.00728,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-56817",
      "url": "https://patchblox.com/security/cve/CVE-2026-56817",
      "title": "netty-tcnative: insecure defaults in XML parsing in \u0060io.netty:netty-codec-xml\u0060 (bsc#1272257).",
      "priority": "Routine",
      "epss": 0.00694,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-56819",
      "url": "https://patchblox.com/security/cve/CVE-2026-56819",
      "title": "netty-tcnative: memory leak in \u0060io.netty:netty-codec-http2\u0060 (bsc#1272258).",
      "priority": "Routine",
      "epss": 0.00665,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-55851",
      "url": "https://patchblox.com/security/cve/CVE-2026-55851",
      "title": "netty-tcnative: memory exhaustion in \u0060io.netty:netty-codec-haproxy\u0060 (bsc#1272253).",
      "priority": "Routine",
      "epss": 0.0063,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-56818",
      "url": "https://patchblox.com/security/cve/CVE-2026-56818",
      "title": "netty-tcnative: memory leak in \u0060io.netty:netty-codec-redis\u0060 (bsc#1272603).",
      "priority": "Routine",
      "epss": 0.00473,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-59921",
      "url": "https://patchblox.com/security/cve/CVE-2026-59921",
      "title": "netty-tcnative: improper CR/LF neutralization in \u0060io.netty:netty-codec-http\u0060 (multipart) (bsc#1272307).",
      "priority": "Routine",
      "epss": 0.00465,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-59901",
      "url": "https://patchblox.com/security/cve/CVE-2026-59901",
      "title": "netty-tcnative: infinite loop in \u0060io.netty:netty-codec-compression\u0060 (bzip2) (bsc#1272304).",
      "priority": "Routine",
      "epss": 0.0046,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-59898",
      "url": "https://patchblox.com/security/cve/CVE-2026-59898",
      "title": "netty-tcnative: protocol version confusion in \u0060io.netty:netty-codec-http\u0060 (websocket) (bsc#1272302).",
      "priority": "Routine",
      "epss": 0.00439,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-59920",
      "url": "https://patchblox.com/security/cve/CVE-2026-59920",
      "title": "netty-tcnative: improper CR/LF neutrolization in \u0060io.netty:netty-codec-stomp\u0060 (bsc#1272306).",
      "priority": "Routine",
      "epss": 0.00415,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-59900",
      "url": "https://patchblox.com/security/cve/CVE-2026-59900",
      "title": "netty-tcnative: improper header neutralization in \u0060io.netty:netty-codec-http2\u0060 (bsc#1272303).",
      "priority": "Routine",
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-56820",
      "url": "https://patchblox.com/security/cve/CVE-2026-56820",
      "title": "netty-tcnative: improper certificate validation in \u0060io.netty:netty-handler-ssl-ocsp\u0060 (bsc#1272259).",
      "priority": "Routine",
      "epss": 0.00313,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-56821",
      "url": "https://patchblox.com/security/cve/CVE-2026-56821",
      "title": "netty-tcnative: improper certificate revocation check in \u0060io.netty:netty-handler-ssl-ocsp\u0060 (bsc#1272299).",
      "priority": "Routine",
      "epss": 0.00219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-56822",
      "url": "https://patchblox.com/security/cve/CVE-2026-56822",
      "title": "netty-tcnative: time-of-check/time-of-use in \u0060io.netty:netty-handler-ssl-ocsp\u0060 (bsc#1272300).",
      "priority": "Routine",
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-59919",
      "url": "https://patchblox.com/security/cve/CVE-2026-59919",
      "title": "netty-tcnative: improper CR/LF neutralization in \u0060io.netty:netty-codec-haproxy\u0060 (bsc#1272305).",
      "priority": "Routine",
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}