CLSA-2026-1785947990 TuxCare security update for org.apache.commons:commons-compress (3 CVEs)

TuxCare rebuilt org.apache.commons:commons-compress to address 3 CVEs. Fixed in 1.15-tuxcare.1...

CLSA-2026-1785936779 TuxCare security update for org.apache.commons:commons-compress (2 CVEs)

TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.14-tuxcare.1...

CLSA-2026-1785909110 TuxCare security update for org.apache.commons:commons-compress (1 CVE)

TuxCare rebuilt org.apache.commons:commons-compress to address 1 CVE. Fixed in 1.12-tuxcare.1...

CLSA-2026-1779756518 TuxCare security update for org.apache.commons:commons-compress (2 CVEs)

TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.21-tuxcare.1...

CLSA-2026-1770595751 TuxCare security update for org.apache.commons:commons-lang3 (1 CVE)

TuxCare rebuilt org.apache.commons:commons-lang3 to address 1 CVE. Fixed in 3.17.0-tuxcare.1...

CLSA-2025-1764547658 TuxCare security update for org.apache.commons:commons-lang3 (1 CVE)

TuxCare rebuilt org.apache.commons:commons-lang3 to address 1 CVE. Fixed in 3.8.1-tuxcare.1...

CLSA-2025-1759709174 TuxCare security update for org.apache.commons:commons-lang3 (1 CVE)

TuxCare rebuilt org.apache.commons:commons-lang3 to address 1 CVE. Fixed in 3.4-tuxcare.1...

CLSA-2025-1759795576 TuxCare security update for org.apache.commons:commons-lang3 (1 CVE)

TuxCare rebuilt org.apache.commons:commons-lang3 to address 1 CVE. Fixed in 3.12.0-tuxcare.1...

CLSA-2025-1754006614 TuxCare security update for commons-beanutils:commons-beanutils (1 CVE)

TuxCare rebuilt commons-beanutils:commons-beanutils to address 1 CVE. Fixed in 1.9.4-tuxcare.1...

Security Bulletin: IBM Storage Protect Data Protection for Virtual Environments uses multiple Apache Commons libraries that were affected by Denial of Service (DoS) flaw (CVE-2024-26308, CVE-2024-25710)

Summary IBM Storage Protect Data Protection for Virtual Environments uses multiple Apache Commons libraries that were affected by Denial of Service DoS flaw. All those libraries have been upgraded and this issue has been addressed in this release. Vulnerability Details CVEID:CVE-2024-26308...

javapackages-tools:201801 security update

ant-contrib 1.0-0.32.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora28MassRebuild 1.0-0.31.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora27MassRebuild 1.0-0.30.b3 - Rebuilt for https://fedoraproject.org/wiki/Fedora26MassRebuild 1.0-0.29.b3 - Rebuilt for...

SUSE SLED15: apache-commons-compress / apache-commons-lang3 / beust-jcommander / etc (SUSE-SU-2026:3390-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3390-1 advisory. apache-commons-lang3 was updated to 3.20.0: New features: - Add SystemProperties.getPathString, Supplier - Add...

Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn

This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: New features: Add SystemProperties.getPathString, Supplier Add JavaVersion.JAVA25 Add JavaVersion.JAVA26 Add SystemUtils.ISJAVA25 Add...

SUSE-SU-2026:3390-1 Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn

This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: New features: + Add SystemProperties.getPathString, Supplier + Add JavaVersion.JAVA25 + Add JavaVersion.JAVA26 + Add SystemUtils.ISJAVA25 + Add...

SUSE SLED15 / SLES15 Security Update : apache-commons-compress, apache-ivy, brotli-java, zstd-jni (SUSE-SU-2026:3225-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3225-1 advisory. This update for apache-commons-compress, apache-ivy, brotli-java, zstd-jni fixes the following issue Security issues...

EUVD-2026-40847

c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets...

Security update for apache-commons-compress, apache-ivy, brotli-java, zstd-jni

This update for apache-commons-compress, apache-ivy, brotli-java, zstd-jni fixes the following issue Security issues fixed: CVE-2026-26032: improper pathname limitation in PackagerResolver allows for arbitrary files writes outside of the configured buildRoot directory bsc1271727. Other updates an...

SUSE-SU-2026:3225-1 Security update for apache-commons-compress, apache-ivy, brotli-java, zstd-jni

This update for apache-commons-compress, apache-ivy, brotli-java, zstd-jni fixes the following issue Security issues fixed: - CVE-2026-26032: improper pathname limitation in PackagerResolver allows for arbitrary files writes outside of the configured buildRoot directory bsc1271727. Other updates...

USN-8322-2 commons-beanutils regression

USN-8322-1 fixed a vulnerability in Apache Commons BeanUtils. It was discovered that for Ubuntu 18.04 LTS, during the update preparation phase, a previous fix for CVE-2014-0114 and CVE-2019-10086 was incorrectly dropped. This update reintroduces the fix for CVE-2014-0114 and CVE-2019-10086. We...

Security Bulletin: Code injection, cross-site scripting, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency Service is vulnerable to code injection, cross-site scripting, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-46295 DESCRIPTION: Apache Commons Text versions prior to 1.10.0 included interpolation features that...