CLSA-2026-1792011149 TuxCare security update for org.apache.commons:commons-configuration2 (1 CVE)

TuxCare rebuilt org.apache.commons:commons-configuration2 to address 1 CVE. Fixed in 2.9.0-tuxcare.2...

RHLW-2026-10F7476FF588DDE7 Lightwell Security Advisory: commons-configuration2 2.14.0.rhlw-00001

Red Hat Lightwell has released org.apache.commons:commons-configuration2 2.14.0.rhlw-00001 with a backported security fix. CVE-2026-45205: Apache Commons Configuration: StackOverflowError for YAML input with cycles This patched artifact is a drop-in replacement for...

CLSA-2026-1789371248 TuxCare security update for org.apache.commons:commons-configuration2 (1 CVE)

TuxCare rebuilt org.apache.commons:commons-configuration2 to address 1 CVE. Fixed in 2.9.0-tuxcare.1...

CLSA-2026-1789366696 TuxCare security update for org.apache.commons:commons-configuration2 (2 CVEs)

TuxCare rebuilt org.apache.commons:commons-configuration2 to address 2 CVEs. Fixed in 2.8.0-tuxcare.1...

CLSA-2026-1788757933 TuxCare security update for org.apache.commons:commons-configuration2 (1 CVE)

TuxCare rebuilt org.apache.commons:commons-configuration2 to address 1 CVE. Fixed in 2.11.0-tuxcare.1...

Security Bulletin: Vulnerability in commons-configuration2 impacts IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

Summary IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent is affected by Uncontrolled recursion vulnerability in Apache Commons CVE-2026-45205 Vulnerability Details CVEID:CVE-2026-45205 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons. Wh...

SUSE-SU-2026:2642-1 Security update for apache-commons-configuration2, apache-commons-text

This update for apache-commons-configuration2, apache-commons-text fixes the following issues - CVE-2026-45205: uncontrolled recursion leads to StackOverflowError when processing specially crafted configuration files bsc1265299. Changes for apache-commons-configuration2: - Upgrade to version...

Security update for apache-commons-lang3, apache-commons-text, apache-commons-configuration2, apache-commons-cli, apache-commons-io, apache-commons-codec (important)

openSUSE security update: security update for apache-commons-lang3, apache-commons-text, apache-commons-configuration2, apache-commons-cli, apache-commons-io, apache-commons-codec ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20841-1 Rating:...

OPENSUSE-SU-2026:20841-1 Security update for apache-commons-lang3, apache-commons-text, apache-commons-configuration2, apache-commons-cli, apache-commons-io, apache-commons-codec

This update for apache-commons-lang3, apache-commons-text, apache-commons-configuration2, apache-commons-cli, apache-commons-io, apache-commons-codec fixes the following issues: Changes in apache-commons-lang3: Update to 3.20.0 New features: + Add SystemProperties.getPathString, Supplier + Add...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +7247 more potentially affected by CVE-2026-45205 via org.apache.commons:commons-configuration2 (>=2.0, <=2.14.0)

org.apache.commons:commons-configuration2 MAVEN version =2.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2026-45205 Source...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +5735 more potentially affected by CVE-2026-45205 via org.apache.commons:commons-configuration2 (>=2.2, <=2.14.0)

org.apache.commons:commons-configuration2 MAVEN version =2.2, =0.22.0, =0.1.9, =0.1.9, =0.1.9, =3.30.1.1, =3.10.0.5, =3.10.0.7, =0.2.3.5, =0.1.9, =1.2.3, =1.2.3, =1.0.2-slim, =1.0.2-slim, =1.0.9-slim and more Source cves: CVE-2026-45205 Source advisory: OSV:GHSA-337M-MW94-2V6G...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +5735 more potentially affected by CVE-2026-45205 via org.apache.commons:commons-configuration2 (>=2.2, <=2.14.0)

org.apache.commons:commons-configuration2 MAVEN version =2.2, =0.22.0, =0.1.9, =0.1.9, =0.1.9, =3.30.1.1, =3.10.0.5, =3.10.0.7, =0.2.3.5, =0.1.9, =1.2.3, =1.2.3, =1.0.2-slim, =1.0.2-slim, =1.0.9-slim and more Source cves: CVE-2026-45205 Source advisory: MEND:CVE-2026-45205...

OPENSUSE-SU-2024:13259-1 apache-commons-configuration2-2.9.0-1.1 on GA media

These are all security issues fixed in the apache-commons-configuration2-2.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

Important: Red Hat Security Advisory: Migration Toolkit for Runtimes security, bug fix and enhancement update

Migration Toolkit for Runtimes 1.2.6 release Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

SUSE: Security Advisory (SUSE-SU-2024:1365-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: apache-commons-configuration2 / etc (SUSE-SU-2024:1365-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1365-1 advisory. - CVE-2024-29131: Fixed StackOverflowError adding property in...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +5400 more potentially affected by CVE-2024-29131 via org.apache.commons:commons-configuration2 (>=2.0, <=2.10.0)

org.apache.commons:commons-configuration2 MAVEN version =2.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +5400 more potentially affected by CVE-2024-29133 via org.apache.commons:commons-configuration2 (>=2.0, <=2.10.0)

org.apache.commons:commons-configuration2 MAVEN version =2.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +5400 more potentially affected by CVE-2024-29133 via org.apache.commons:commons-configuration2 (>=2.0, <=2.10.0)

org.apache.commons:commons-configuration2 MAVEN version =2.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +5400 more potentially affected by CVE-2024-29131 via org.apache.commons:commons-configuration2 (>=2.0, <=2.10.0)

org.apache.commons:commons-configuration2 MAVEN version =2.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...