CLSA-2026-1785497476 tomcat: Fix of 5 CVEs

CVE-2026-55955: add replay protection to the cluster EncryptInterceptor by encrypting a trusted timestamp with each message and rejecting duplicate, stale or future messages via the new replayWindowTime and replayWindowMessageCount attributes upstream tomcat 9.0.119. The default...

CVE-2025-55039

This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...

CVE-2025-55039: Improper Verification of Cryptographic Signature

This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0. Apache Spark versions before 4.0.0, 3.5.2 and 3.4.4 use an insecure default network encryption cipher for RPC communication between nodes. When spark.network.crypto.enabled is set to true it is set to false by default, but...

PT-2025-42275

Name of the Vulnerable Software and Affected Versions Apache Spark versions prior to 3.4.4 Apache Spark versions prior to 3.5.2 Apache Spark versions prior to 4.0.0 Description Apache Spark versions before 3.4.4, 3.5.2, and 4.0.0 utilize an insecure default network encryption cipher for RPC...

PT-2020-22755

Name of the Vulnerable Software and Affected Versions java-1 8 0-openjdk versions prior to jdk8u275 Description The issue is related to several problems in the java-1 8 0-openjdk, including a broken StartTLS functionality, private key issues with chosen signature algorithms, PKCS11 connection...

SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2018:0665-1)

This update for java-180-ibm fixes the following issues : - Removed java-180-ibm-alsa and java-180-ibm-plugin entries in baselibs.conf due to errors in osc sourcevalidator Version update to 8.0.5.10 bsc1082810 - Security fixes: CVE-2018-2639 CVE-2018-2638 CVE-2018-2633 CVE-2018-2637 CVE-2018-2634...