tomcat security update

1:10.1.49-3 - Related: RHEL-168577 Remove unnecessary patch 1:10.1.49-2 - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomca...

CVE-2026-60569: Missing Authentication for Critical Function

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: NDB Operator. Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Cluster...

PT-2026-62253

Name of the Vulnerable Software and Affected Versions MySQL Cluster versions 8.0.0 through 8.0.47 Description An issue exists in the Server: Optimizer component of MySQL Cluster. A high privileged attacker with network access via multiple protocols can exploit this flaw to cause a hang or a...

CVE-2026-60171: Uncontrolled Resource Consumption

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.47. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attac...

Wazuh Cluster Distributed API Code Execution

The vulnerability of the Cluster Distributed API DAPI component of the Wazuh security monitoring and threat detection platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root privileges by...

CVE-2026-60194: Improper Access Control

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: JSON Duality. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multip...

CVE-2026-47064: Improper Access Control

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows low privilege...

CVE-2026-60331: Improper Access Control

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high...

PT-2026-62138

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description A flaw in the...

PT-2026-62224

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description A flaw in the...

PT-2026-62266

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

PT-2026-62271

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

PT-2026-62273

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

PT-2026-62426

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

PT-2026-62269

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

PT-2026-62427

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

PT-2026-62984

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...

CVE-2026-60585: Improper Access Control

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high...

CVE-2026-61081: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Performance Schema. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high...

PT-2026-62186

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.0 through 8.4.10 MySQL Server versions 9.7.0 through 9.7.1 MySQL Cluster versions 8.0.0 through 8.0.47 MySQL Cluster versions 8.4.0 through 8.4.10 MySQL Cluster versions 9.7.0 through 9.7.1 Description An issue exists...