CLEANSTART-2026-LI34904 Security fixes in strimzi-kafka-operator 1.2.0-r1

Package strimzi-kafka-operator version 1.2.0-r1 fixes 2 vulnerabilities: CVE-2026-59949, CVE-2026-59903...

CLEANSTART-2026-NW99656 Security fixes in elasticsearch 9.5.2-r1

Package elasticsearch version 9.5.2-r1 fixes 3 vulnerabilities: CVE-2026-64607, CVE-2026-59903, CVE-2026-49844...

CLEANSTART-2026-US56197 Security fixes in elasticsearch 9.5.2-r2

Package elasticsearch version 9.5.2-r2 fixes 3 vulnerabilities: CVE-2026-64607, CVE-2026-59903, CVE-2026-49844...

Linux Distros Unpatched Vulnerability : CVE-2026-59903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler...

CVE-2026-59903

creationtimestamp| type| source ---|---|--- 2026-08-17 19:31:21+00:00| seen| https://gist.github.com/alon710/53c9694ceb5875fbe39960b018952b7c...

UBUNTU-CVE-2026-59903

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces application Vary headers such as Authorization or Cookie with Origin, allowing a caching proxy or CDN to reuse...