GHSA-5MWF-688X-MR7X vulnerabilities

Vulnerabilities for packages: logstash...

GHSA-5MWF-688X-MR7X vulnerabilities

Vulnerabilities for packages: logstash...

Bootiful Spring Boot 3.4: Spring Boot

And now we’re back where we started: Spring Boot 3.4! This release is what pulls everything together. When you look at Spring Boot, remember that it normalizes the integration of all the projects it assembles and tries, wherever possible, to smooth out whatever integration issues might arise from...

GHSA-2X2G-32R7-P4X8 vulnerabilities

Vulnerabilities for packages: druid, strimzi-kafka-operator, logstash, apache-nifi, thingsboard...

CVE-2024-31141 vulnerabilities

Vulnerabilities for packages: druid, strimzi-kafka-operator, logstash, apache-nifi, thingsboard...

GHSA-HXX2-7VCW-MQR3 vulnerabilities

Vulnerabilities for packages: gitlab-cng, ruby3.2-sinatra, logstash, ruby3.3-sinatra...

CVE-2024-21510 vulnerabilities

Vulnerabilities for packages: gitlab-cng, ruby3.2-sinatra, logstash, ruby3.3-sinatra...

CVE-2024-49761 vulnerabilities

Vulnerabilities for packages: jruby, ruby, ruby3.3-fluentd-kubernetes-daemonset, kube-fluentd-operator, logstash, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-2RXP-V6PW-CH6M vulnerabilities

Vulnerabilities for packages: jruby, ruby, ruby3.3-fluentd-kubernetes-daemonset, kube-fluentd-operator, logstash, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset...

GHSA-78WR-2P64-HPWJ vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, hadoop-fips, sonarqube, hadoop-client-modules, confluent-kafka-jre-bcfips, kafka, management-api-for-apache-cassandra-5.0, opensearch, zookeeper, confluent-common-docker, confluent-kafka, druid, logstash, wildfly, sonarqube-10, celeborn,...

GHSA-R7PG-V2C8-MFG3 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, celeborn, druid, trino, logstash, tez, hadoop-client-modules, apache-nifi, akhq...

CVE-2024-47554 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, hadoop-fips, sonarqube, hadoop-client-modules, confluent-kafka-jre-bcfips, kafka, management-api-for-apache-cassandra-5.0, opensearch, zookeeper, confluent-common-docker, confluent-kafka, druid, logstash, wildfly, sonarqube-10, celeborn,...

CVE-2024-47561 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, celeborn, druid, trino, logstash, tez, hadoop-client-modules, apache-nifi, akhq...

GHSA-9HF4-67FC-4VF4 vulnerabilities

Vulnerabilities for packages: gitlab-cng, ruby3.2-puma...

CVE-2024-45614 vulnerabilities

Vulnerabilities for packages: gitlab-cng, ruby3.2-puma...

Security Bulletin: Vulnerabilities in Logstash affect IBM Operations Analytics - Log Analysis (CVE-2022-29181, CVE-2022-23476)

Summary There are multple nokogiri vulnerabilities in Logstash that effect IBM Operations Analytics - Log Analysis. These have been addressed. Vulnerability Details CVEID:CVE-2022-29181 DESCRIPTION: Nokogiri is vulnerable to a denial of service, caused by improper handling of unexpected data type...

Security Bulletin: Multiple vulnerabilities in Netty affect Apache Solr, Apache Zookeeper and Logstash shipped with IBM Operations Analytics - Log Analysis

Summary There are vulnerabilities in various versions of Netty that affect Apache Solr, Apache Zookeeper and Logstash. The vulnerabilities are in Vulnerability Details section Vulnerability Details CVEID:CVE-2019-20444 DESCRIPTION: Netty is vulnerable to HTTP request smuggling, caused by a flaw i...

Security Bulletin: Apache James and Bouncy Castle vulnerabilities in Apache Solr and Logstash shipped with IBM Operations Analytics - Log Analysis (CVE-2023-33202,CVE-2024-21742,CVE-2024-29857,CVE-2024-30172,CVE-2024-34447)

Summary There are potential denial of service and bypass security restrictions vulnerabilities in Apache James Mime4J and Bouncy Castle Crypto Package, which are used by Apache Solr and Logstash in IBM Operations Analytics - Log Analysis Vulnerability Details CVEID:CVE-2024-34447 DESCRIPTION: The...

Structured logging in Spring Boot 3.4

Logging is a long established part of troubleshooting applications and one of the three pillars of observability, next to metrics and traces. No one likes flying blind in production, and when incidents happen, developers are happy to have log files. Logs are often written out in a human-readable...

GHSA-VMWR-MC7X-5VC3 vulnerabilities

Vulnerabilities for packages: jruby, ruby, ruby3.3-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rexml...