Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Security update for cassandra-reaper and related packages
published 3 months ago
Summary
A security issue affects cassandra-reaper, debezium-connector-db2-3.5, debezium-connector-db2-3.6 and 9 more (Chainguard). The advisory does not describe the issue in detail. Update to 5.0.0-r3 or later. See the linked advisory for details.
What to do
- Update chainguard cassandra-reaper to version 5.0.0-r3.
- Update chainguard debezium-connector-db2-3.5 to version 3.5.2-r2.
- Update chainguard debezium-connector-db2-3.6 to version 3.6.0-r1.
- Update chainguard debezium-connector-informix-3.6 to version 3.6.0-r1.
- Update chainguard debezium-connector-spanner-3.3 to version 3.3.2-r7.
- Update chainguard debezium-connector-spanner-3.5 to version 3.5.2-r5.
- Update chainguard kafka-4.0 to version 4.0.2-r8.
- Update chainguard kafka-4.1 to version 4.1.2-r6.
- Update chainguard kafka-fips-4.1 to version 4.1.2-r7.
- Update chainguard kafka-fips-4.2 to version 4.2.1-r6.
- Update chainguard wildfly-openjdk-17 to version 41.0.0-r2.
- Update chainguard wildfly-openjdk-21 to version 41.0.0-r2.
- Update wolfi cassandra-reaper to version 5.0.0-r3.
- Update wolfi debezium-connector-db2-3.5 to version 3.5.2-r2.
- Update wolfi debezium-connector-db2-3.6 to version 3.6.0-r1.
- Update wolfi debezium-connector-informix-3.6 to version 3.6.0-r1.
- Update wolfi debezium-connector-spanner-3.5 to version 3.5.2-r5.
- Update wolfi kafka-4.1 to version 4.1.2-r6.
- Update wolfi wildfly-openjdk-17 to version 41.0.0-r2.
- Update wolfi wildfly-openjdk-21 to version 41.0.0-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | cassandra-reaper |
< 5.0.0-r3 Fix: upgrade to 5.0.0-r3
|
| Chainguard | chainguard | debezium-connector-db2-3.5 |
< 3.5.2-r2 Fix: upgrade to 3.5.2-r2
|
| Chainguard | chainguard | debezium-connector-db2-3.6 |
< 3.6.0-r1 Fix: upgrade to 3.6.0-r1
|
| Chainguard | chainguard | debezium-connector-informix-3.6 |
< 3.6.0-r1 Fix: upgrade to 3.6.0-r1
|
| Chainguard | chainguard | debezium-connector-spanner-3.3 |
< 3.3.2-r7 Fix: upgrade to 3.3.2-r7
|
| Chainguard | chainguard | debezium-connector-spanner-3.5 |
< 3.5.2-r5 Fix: upgrade to 3.5.2-r5
|
| Chainguard | chainguard | kafka-4.0 |
< 4.0.2-r8 Fix: upgrade to 4.0.2-r8
|
| Chainguard | chainguard | kafka-4.1 |
< 4.1.2-r6 Fix: upgrade to 4.1.2-r6
|
| Chainguard | chainguard | kafka-fips-4.1 |
< 4.1.2-r7 Fix: upgrade to 4.1.2-r7
|
| Chainguard | chainguard | kafka-fips-4.2 |
< 4.2.1-r6 Fix: upgrade to 4.2.1-r6
|
| Chainguard | chainguard | wildfly-openjdk-17 |
< 41.0.0-r2 Fix: upgrade to 41.0.0-r2
|
| Chainguard | chainguard | wildfly-openjdk-21 |
< 41.0.0-r2 Fix: upgrade to 41.0.0-r2
|
| Wolfi | wolfi | cassandra-reaper |
< 5.0.0-r3 Fix: upgrade to 5.0.0-r3
|
| Wolfi | wolfi | debezium-connector-db2-3.5 |
< 3.5.2-r2 Fix: upgrade to 3.5.2-r2
|
| Wolfi | wolfi | debezium-connector-db2-3.6 |
< 3.6.0-r1 Fix: upgrade to 3.6.0-r1
|
| Wolfi | wolfi | debezium-connector-informix-3.6 |
< 3.6.0-r1 Fix: upgrade to 3.6.0-r1
|
| Wolfi | wolfi | debezium-connector-spanner-3.5 |
< 3.5.2-r5 Fix: upgrade to 3.5.2-r5
|
| Wolfi | wolfi | kafka-4.1 |
< 4.1.2-r6 Fix: upgrade to 4.1.2-r6
|
| Wolfi | wolfi | wildfly-openjdk-17 |
< 41.0.0-r2 Fix: upgrade to 41.0.0-r2
|
| Wolfi | wolfi | wildfly-openjdk-21 |
< 41.0.0-r2 Fix: upgrade to 41.0.0-r2
|
Original advisory text
CGA-98mx-fpcm-pjhp
Timeline
Published25 Jul 2026
Updated26 Jul 2026
First seen26 Jul 2026
Sources
CGA-98mx-fpcm-pjhp · OSV
Track software like this
Free during beta