Apache Pulsar fixes 14 CVEs in 4.0.14, 4.2.5, and 5.0.0
Original title: Apache Pulsar: 14 CVEs fixed in 4.0.14, 4.2.5 and 5.0.0 (combined announcement)
The Pulsar PMC posted a combined advisory, but the excerpt omits the individual CVE ids and affected ranges.
On October 21, Lari Hotari forwarded an Apache Pulsar PMC announcement covering 14 security advisories. The title says the issues are fixed in Pulsar 4.0.14, 4.2.5, and 5.0.0. The mailing-list excerpt does not describe each flaw, its impact, or the vulnerable version ranges.
Unconfirmed: Individual CVE identifiers, severity, and affected version ranges are not in the excerpt.
- The notice is a combined announcement rather than one CVE write-up.
- Fixed releases named in the title are 4.0.14, 4.2.5, and 5.0.0.
- Two Apache mailing-list threads are cited, without their advisory text.
Impact: Unspecified security issues across 14 Pulsar advisories
| Product | Affected | Fixed in |
|---|---|---|
| Apache Pulsar | — | 4.0.14, 4.2.5, 5.0.0 |
- 1.Upgrade Apache Pulsar to 4.0.14, 4.2.5, or 5.0.0 as applicable.
- Vendors
- Apache
- Products
- Apache Pulsar
- Organizations
- Apache Pulsar PMC
From the original article
Posted by Lari Hotari on Oct 21 The Apache Pulsar PMC published 14 security advisories for Apache Pulsar https://lists. apache. org/thread/039cmmk4938zmqn2k8g8joqbpfmy1r1y https://lists.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.