CLEANSTART-2026-RZ47271 Security fixes in elasticsearch 9.4.4-r5

Package elasticsearch version 9.4.4-r5 fixes 2 vulnerabilities: CVE-2026-71497, CVE-2026-45292...

CVE-2026-71497 vulnerabilities

Vulnerabilities for packages: apache-hop, conductor-fips, elasticsearch, wazuh-indexer, elasticsearch-fips, apache-hop-fips, scala, gradle, copybara, metabase, opensearch-fips, apache-tika-fips, nextflow, copybara-fips, opensearch, apache-tika, jbang, conductor, spdx-tools-java...

SUSE CVE-2026-71497

jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a different element. When a custom Safelist permits certain...