Linuxsecurity

SUSE and openSUSE Address CRLF Injection Vulnerability in netty

First seen 19 Dec 2025, 22:56 UTC • Linuxsecurity

•45.6

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

SUSE and openSUSE released updates for netty to address a moderate security issue identified as CVE-2025-67735. The vulnerability involves a lack of URI sanitization in `HttpRequestEncoder`, which can lead to CRLF injection and potential request smuggling. The updates include enhancements and bug fixes, including an update to upstream version 4.1.130.

Ask AI about this cluster

Answers cite the sources they use

How this analysis works

Attack Flow

Continue Reading

Critical Vulnerabilities in Oracle Coherence and Access Manager Disclosed Depthfirst Unveils $5M Initiative to Address Critical Vulnerabilities in Open Source Software Ubuntu 25.10: Netty HTTP Vulnerabilities Lead to Denial of Service Risks

SUSE and openSUSE Address CRLF Injection Vulnerability in netty

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading