biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3, <=1.0.5) +745 more potentially affected by CVE-2026-101292 via org.apache.activemq:artemis-core-client (>=2.11.0, <=2.33.0)

org.apache.activemq:artemis-core-client MAVEN version =2.11.0, =1.0.1, =1.0.3, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =1.0.3, =1.0.7364, =1.6, =1.1, =0.1.19, =0.2.5 and more Source cves: CVE-2026-101292 Source advisory: MEND:CVE-2026-101292...

org.apache.activemq:artemis-features (>=2.31.1, <=2.33.0) potentially affected by CVE-2026-101292 via org.apache.activemq:artemis-core-client-osgi (>=2.31.1, <=2.33.0)

org.apache.activemq:artemis-core-client-osgi MAVEN version =2.31.1, =2.31.1, =2.33.0 Source cves: CVE-2026-101292 Source advisory: MEND:CVE-2026-101292...

artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in Red Hat EAP permit deserialization by default

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity/isTrustedType method. However, by default both allow-list and block-list are empty...

artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in Red Hat EAP permit deserialization by default

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity/isTrustedType method. However, by default both allow-list and block-list are empty...

Important: Red Hat Security Advisory: AMQ Clients 2026.Q3

An update is now available for Red Hat AMQ Clients Red Hat Product Security has rated this update as having an impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the Referenc...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the parameter processing of message-based management requests sent by an authenticated client with MANAGE permission. An attacker can cause excessive computation and pin the processing thread by...

Deserialization of Untrusted Data

Overview org.apache.activemq:artemis-core-client is a High-performance, non-blocking architecture for the next generation of event-driven messaging applications. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the parameter processing of message-based...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3, <=1.0.5) +989 more potentially affected by CVE-2026-57822 via org.apache.activemq:artemis-core-client (>=1.3.0, <=2.53.0)

org.apache.activemq:artemis-core-client MAVEN version =1.3.0, =1.0.1, =1.0.3, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =1.0.3, =1.0.7364, =1.6, =1.1, =1.2 and more Source cves: CVE-2026-57822 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-20186821...

com.datomic:peer (>=1.0.7705, <=1.0.7745), com.viglet.core:viglet-core-messaging (>=2026.3.10, <=2026.3.13) +82 more potentially affected by CVE-2026-57822 via org.apache.artemis:artemis-core-client (>=2.50.0, <=2.56.0)

org.apache.artemis:artemis-core-client MAVEN version =2.50.0, =1.0.7705, =2026.3.10, =0.29.0, =4.1.6, =9.0.13, =5.5.2, =5.5.2, =5.5.2, =5.5.2, =9.0.13, =9.0.13, =1.6.0, =1.6.2 - io.kaoto.forage:forage-quarkus-jms 1.6.2 and more Source cves: CVE-2026-57822 Source advisory:...

Missing Authentication for Critical Function

Overview org.apache.activemq:artemis-core-client is a High-performance, non-blocking architecture for the next generation of event-driven messaging applications. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the initial cluster connection...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the initial cluster connection handshake. An attacker can obtain administrative credentials by capturing network traffic during the handshake. Remediation Upgrade...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3, <=1.0.5) +1094 more potentially affected by CVE-2026-49364 via org.apache.activemq:artemis-core-client (>=1.0.0, <=2.53.0)

org.apache.activemq:artemis-core-client MAVEN version =1.0.0, =1.0.1, =1.0.3, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =1.0.3, =1.0.7364, =1.6, =1.1, =1.2 and more Source cves: CVE-2026-49364 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-20159298...

com.datomic:peer (>=1.0.7705, <=1.0.7745), com.viglet.core:viglet-core-messaging (>=2026.3.10, <=2026.3.13) +82 more potentially affected by CVE-2026-49364 via org.apache.artemis:artemis-core-client (>=2.50.0, <=2.56.0)

org.apache.artemis:artemis-core-client MAVEN version =2.50.0, =1.0.7705, =2026.3.10, =0.29.0, =4.1.6, =9.0.13, =5.5.2, =5.5.2, =5.5.2, =5.5.2, =9.0.13, =9.0.13, =1.6.0, =1.6.2 - io.kaoto.forage:forage-quarkus-jms 1.6.2 and more Source cves: CVE-2026-49364 Source advisory:...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3, <=1.0.5) +1094 more potentially affected by CVE-2026-49364 via org.apache.activemq:artemis-core-client (>=1.0.0, <=2.53.0)

org.apache.activemq:artemis-core-client MAVEN version =1.0.0, =1.0.1, =1.0.3, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =1.0.3, =1.0.7364, =1.6, =1.1, =1.2 and more Source cves: CVE-2026-49364 Source advisory: MEND:CVE-2026-49364...

com.datomic:peer (>=1.0.7705, <=1.0.7745), com.viglet.core:viglet-core-messaging (>=2026.3.10, <=2026.3.13) +82 more potentially affected by CVE-2026-49364 via org.apache.artemis:artemis-core-client (>=2.50.0, <=2.56.0)

org.apache.artemis:artemis-core-client MAVEN version =2.50.0, =1.0.7705, =2026.3.10, =0.29.0, =4.1.6, =9.0.13, =5.5.2, =5.5.2, =5.5.2, =5.5.2, =9.0.13, =9.0.13, =1.6.0, =1.6.2 - io.kaoto.forage:forage-quarkus-jms 1.6.2 and more Source cves: CVE-2026-49364 Source advisory: MEND:CVE-2026-49364...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3, <=1.0.5) +989 more potentially affected by CVE-2026-57822 via org.apache.activemq:artemis-core-client (>=1.3.0, <=2.53.0)

org.apache.activemq:artemis-core-client MAVEN version =1.3.0, =1.0.1, =1.0.3, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =1.0.3, =1.0.7364, =1.6, =1.1, =1.2 and more Source cves: CVE-2026-57822 Source advisory: MEND:CVE-2026-57822...

com.datomic:peer (>=1.0.7705, <=1.0.7745), com.viglet.core:viglet-core-messaging (>=2026.3.10, <=2026.3.13) +82 more potentially affected by CVE-2026-57822 via org.apache.artemis:artemis-core-client (>=2.50.0, <=2.56.0)

org.apache.artemis:artemis-core-client MAVEN version =2.50.0, =1.0.7705, =2026.3.10, =0.29.0, =4.1.6, =9.0.13, =5.5.2, =5.5.2, =5.5.2, =5.5.2, =9.0.13, =9.0.13, =1.6.0, =1.6.2 - io.kaoto.forage:forage-quarkus-jms 1.6.2 and more Source cves: CVE-2026-57822 Source advisory: MEND:CVE-2026-57822...

[SECURITY] Fedora 44 Update: openssh-10.2p1-12.fc44

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

OESA-2026-2156 mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fixes:...

OESA-2026-2157 mysql security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. %if Security Fixes:...