CLSA-2026-1788330944 TuxCare security update for org.lz4 (1 CVE)

TuxCare rebuilt 2 org.lz4 packages to address 1 CVE. Fixed in 1.8.0-tuxcare.2...

CLSA-2026-1786627215 TuxCare security update for org.lz4 (2 CVEs)

TuxCare rebuilt 2 org.lz4 packages to address 2 CVEs. Fixed in 1.8.0-tuxcare.1...

cc.ddrpa.dorian.polystash:polystash-spring-boot-starter (>=1.0.0, <=1.0.1), com.alibaba.fastjson2:fastjson2-extension (>=2.0.27, <=2.0.65) +46 more potentially affected by CVE-2025-12183 via org.lz4:lz4-pure-java (1.8.0)

org.lz4:lz4-pure-java MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.lz4:lz4-pure-java and may be impacted: - cc.ddrpa.dorian.polystash:polystash-spring-boot-starter =1.0.0, =2.0.27, =0.3.1, =0.40.8-public, =0.40.8-public,...