8 matches found
Security update for httpcomponents-client
This update for httpcomponents-client fixes the following issue: CVE-2026-64607: improper release of underlying connection back to connection manager when an invalid or unsupported Content-Encoding header value in a response message bsc1273163. Patch Instructions: To install this SUSE update use...
httpcomponents-client-4.5.14-2.1 on GA media (moderate)
httpcomponents-client-4.5.14-2.1 on GA media Announcement ID: openSUSE-SU-2026:11647-1 Rating: moderate Cross-References: CVE-2026-64607 CVSS scores: CVE-2026-64607 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2026-64607 SUSE : 6.9...
CLEANSTART-2026-NW99656 Security fixes in elasticsearch 9.5.2-r1
Package elasticsearch version 9.5.2-r1 fixes 3 vulnerabilities: CVE-2026-64607, CVE-2026-59903, CVE-2026-49844...
CLEANSTART-2026-AY54291 Security fixes in spring-boot 4.1.0-r0
Package spring-boot version 4.1.0-r0 fixes 3 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-64607...
CLEANSTART-2026-US56197 Security fixes in elasticsearch 9.5.2-r2
Package elasticsearch version 9.5.2-r2 fixes 3 vulnerabilities: CVE-2026-64607, CVE-2026-59903, CVE-2026-49844...
CLEANSTART-2026-TM54369 Security fixes in spring-boot 4.0.7-r0
Package spring-boot version 4.0.7-r0 fixes 3 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-64607...
Security Bulletin: IBM i is Affected By Holding Resources after Effective Lifetime Vulnerability in Electronic Service Agent [CVE-2026-64607]
Summary Electronic Service Agent for IBM i uses HttpClient for HTTP message handling. HttpClient is vulnerable to not releasing underlying resources when encountering an invalid or unsupported 'Content-Encoding' header value CVE-2026-64607 as described in the vulnerability details section...
