CLEANSTART-2026-RJ93794 Netty is an asynchronous, event-driven network application framework

CVE-2026-42579 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

ROOT-APP-MAVEN-CVE-2026-42579 CVE-2026-42579 in io.netty:netty-codec-dns - Patched by Root

Root has patched CVE-2026-42579 in the io.netty:netty-codec-dns package for Root:Maven. Multiple fixed versions available...

CLEANSTART-2026-IT89059 Security fix for CVE-2026-42579 applied in: apache-hive 4.2.0-r3, apache-nifi 2.9.0-r1, elasticsearch 9.2.8-r0, elasticsearch 9.3.7-r1, elasticsearch 9.4.3-r1, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42579 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW72112 Security fixes in management-api-for-apache-cassandra-5.0 0.1.118-r2

Package management-api-for-apache-cassandra-5.0 version 0.1.118-r2 fixes 26 vulnerabilities: CVE-2026-42583, CVE-2026-42579, CVE-2026-33870, CVE-2026-42584, CVE-2026-42587...

CLEANSTART-2026-JK70827 Security fixes in elasticsearch 9.3.7-r1

Package elasticsearch version 9.3.7-r1 fixes 5 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-41715, CVE-2026-42579, CVE-2026-45536...

Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition

Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate Developer Edition version 2.12.0 Vulnerability Details CVEID:CVE-2026-42578 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandl...

CVE-2026-42579

A flaw was found in Netty. Netty's DNS Domain Name System codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the...

Linux Distros Unpatched Vulnerability : CVE-2026-42579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domai...

CVE-2026-42579 Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC 1035 domain name constraints during either encoding or decoding. This creates a bidirectional attack surface: malicious DNS responses can exploit t...

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.covia:covia-sql (0.6.0) +3377 more potentially affected by CVE-2026-42579 via io.netty:netty-codec-dns (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-dns MAVEN version =4.2.0.alpha1, =0.4.0, =0.4.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42579 Source advisory: MEND:CVE-2026-42579...

CVE-2026-42579 vulnerabilities

Vulnerabilities for packages: celeborn, wildfly, sonarqube, tez, thingsboard, druid, apache-nifi, spark, apicurio-registry, flyway, strimzi-kafka-operator, zipkin, opensearch, keycloak, trino, apache-pulsar, akhq, management-api-for-apache-cassandra-5.0, infinispan...