RHLW-2026-02416b185203289c

See a problem?
Please try reporting it to the source first.

Source

https://github.com/project-lightwell/lightwell-osv/blob/main/advisories/RHLW-2026-02416b185203289c.json

Import Source

https://github.com/project-lightwell/lightwell-osv/blob/main/advisories/RHLW-2026-02416b185203289c.json

JSON Data

https://api.test.osv.dev/v1/vulns/RHLW-2026-02416b185203289c

Upstream

Published

2026-10-13T18:33:15Z

Modified

2026-10-29T14:30:02Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

Lightwell Security Advisory: netty-codec-dns 4.1.132.Final-rhlw-00002

Details

Red Hat Lightwell has released io.netty:netty-codec-dns 4.1.132.Final-rhlw-00002 with a backported security fix.

CVE-2026-42579: Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)

This patched artifact is a drop-in replacement for io.netty:netty-codec-dns 4.1.132.Final from Maven Central.

References

Credits

- Red Hat Lightwell - REMEDIATION_DEVELOPER

Affected packages

Red Hat Lightwell:Maven / io.netty:netty-codec-dns

Package

Name: io.netty:netty-codec-dns
Purl: pkg:maven/io.netty/netty-codec-dns

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.1.132.Final

Fixed

4.1.132.Final-rhlw-00002

Affected versions

4.*

4.1.132.Final

Database specific

lightwell

{
    "backport_base_version": "4.1.132.Final",
    "remediated_version": "4.1.132.Final-rhlw-00002",
    "repository_url": "https://packages.redhat.com/lightwell/java/remediated/"
}

source

"https://github.com/project-lightwell/lightwell-osv/blob/main/advisories/RHLW-2026-02416b185203289c.json"