CLEANSTART-2026-AB17721 Security fixes in solr 10.0.0-r6

Package solr version 10.0.0-r6 fixes 4 vulnerabilities: CVE-2026-8384, CVE-2026-6790, CVE-2026-10051, CVE-2026-10050...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: solr, druid, trino, neo4j, confluent-kafka, akhq, strimzi-kafka-operator, dependency-track...

CVE-2026-8384 vulnerabilities

Vulnerabilities for packages: solr, kafka-fips, kafka, solr-fips, akhq, trino, druid, apache-hop, spark-fips, apache-hop-fips, confluent-kafka, neo4j, strimzi-kafka-operator, traccar, spark-kubernetes-operator-fips, traccar-fips, apache-jena-fuseki, jenkins, dependency-track,...

CVE-2026-8384

creationtimestamp| type| source ---|---|--- 2026-07-14 11:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5q2hfk72w 2026-07-20 05:39:03+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2ldikcy42i 2026-07-20 05:44:37+00:00| seen|...

DEBIAN-CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...

CVE-2026-8384

In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...