ALT-PU-2026-8201: package kafka update to version 4.3.0-alt1
Описание
This update upgrades kafka to version 4.3.0-alt1.
Устраненные уязвимости26
Ссылки15
GHSA-28jg-cgg7-j4wc
https://github.com/advisories/GHSA-28jg-cgg7-j4wcGHSA-3677-xxcr-wjqv
https://github.com/advisories/GHSA-3677-xxcr-wjqvGHSA-3p8m-j85q-pgmj
https://github.com/advisories/GHSA-3p8m-j85q-pgmjGHSA-5qcv-4rpc-jp93
https://github.com/advisories/GHSA-5qcv-4rpc-jp93GHSA-6fmv-xxpf-w3cw
https://github.com/advisories/GHSA-6fmv-xxpf-w3cwGHSA-7xrh-hqfc-g7qr
https://github.com/advisories/GHSA-7xrh-hqfc-g7qrGHSA-cmp6-m4wj-q63q
https://github.com/advisories/GHSA-cmp6-m4wj-q63qGHSA-crhr-qqj8-rpxc
https://github.com/advisories/GHSA-crhr-qqj8-rpxcGHSA-j288-q9x7-2f5v
https://github.com/advisories/GHSA-j288-q9x7-2f5vGHSA-qh8g-58pp-2wxh
https://github.com/advisories/GHSA-qh8g-58pp-2wxhGHSA-vqf4-7m7x-wgfc
https://github.com/advisories/GHSA-vqf4-7m7x-wgfcGHSA-wf66-mphr-4c4r
https://github.com/advisories/GHSA-wf66-mphr-4c4rGHSA-wjpw-4j6x-6rwh
https://github.com/advisories/GHSA-wjpw-4j6x-6rwhGHSA-wxr5-93ph-8wr9
https://github.com/advisories/GHSA-wxr5-93ph-8wr9Связанные уязвимости
ALT-PU-2026-8269: package `kafka` update to version 4.3.0-alt1
In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.
In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.
In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.
In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS ...