7 matches found
CLEANSTART-2026-SD03557 Security fixes in elasticsearch 9.2.8-r2
Package elasticsearch version 9.2.8-r2 fixes 6 vulnerabilities: CVE-2025-68161, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-34479...
CLEANSTART-2026-FE38987 Security fixes in schema-registry 8.1.2-r0
Package schema-registry version 8.1.2-r0 fixes 5 vulnerabilities: CVE-2025-12383, CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480...
Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in log4j-core (CVE-2026-34479)
Summary IBM® Db2® federated server is affected by a vulnerability in log4j-core. Vulnerability Details CVEID:CVE-2026-34479 DESCRIPTION: The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output...
CLEANSTART-2026-KV09488 Security fixes for CVE-2026-23865, CVE-2026-23868, CVE-2026-24281, CVE-2026-24308, CVE-2026-34479, CVE-2026-42577, ghsa-355h-qmc2-wpwf, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-h383-gmxw-35v2, ghsa-rwm7-x88c-3g2p, ghsa-w35j-pv5h-q9q9 applied in versions: 9.10.1-r1, 9.10.1-r2
Multiple security vulnerabilities affect the solr package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-34479 vulnerabilities
Vulnerabilities for packages: spark, pinot, logstash-fips, kserve-modelmesh, druid, solr, akhq, kafka-fips, commercial-elasticsearch, nuxeo, flink, elasticsearch, celeborn, spark-fips, pinot-fips, geoserver, opensearch, logstash, elasticsearch-fips, kafka, sonarqube...
io.github.braully:bpp-cobranca (>=1.0.0 <=1.0.1), org.opencadc:cadc-access-control (>=1.1.21 <=1.1.31) +78 more potentially affected by CVE-2026-34479 via org.apache.logging.log4j:log4j-1.2-api (=3.0.0-beta2)
org.apache.logging.log4j:log4j-1.2-api MAVEN version =3.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.logging.log4j:log4j-1.2-api and may be impacted: - io.github.braully:bpp-cobranca =1.0.0, =1.1.21, =1.0.8, =1.2.0, =1.1.10, =1....
