Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Security update for apache-pulsar and related packages
published 10 months ago
Summary
A security issue affects apache-pulsar, apache-pulsar-compat, confluent-common-docker and 20 more (Chainguard). The advisory does not describe the issue in detail. Update to 4.1.2-r2 or later. See the linked advisory for details.
What to do
- Update chainguard apache-pulsar to version 4.1.2-r2.
- Update chainguard apache-pulsar-compat to version 4.1.2-r2.
- Update chainguard confluent-common-docker to version 7.6.9-r1.
- Update chainguard hadoop-fips-3.3.6 to version 3.3.6-r19.
- Update chainguard kafka-3.7 to version 3.7.2-r50.
- Update chainguard kafka-3.8 to version 3.8.1-r49.
- Update chainguard kafka-4.0 to version 4.0.1-r2.
- Update chainguard kafka-iamguarded-compat-4.0 to version 4.0.1-r2.
- Update chainguard kafka-strimzi-compat to version 0.49.1-r1.
- Update chainguard kafka_exporter-strimzi-compat to version 0.49.1-r1.
- Update chainguard prometheus-jmx-exporter-strimzi-compat to version 0.49.1-r1.
- Update chainguard strimzi-kafka-operator to version 0.49.1-r1.
- Update chainguard strimzi-kafka-operator-cluster-operator to version 0.49.1-r1.
- Update chainguard strimzi-kafka-operator-kafka-agent to version 0.49.1-r1.
- Update chainguard strimzi-kafka-operator-kafka-agent-3 to version 0.49.1-r1.
- Update chainguard strimzi-kafka-operator-kafka-base to version 0.49.1-r1.
- Update chainguard strimzi-kafka-operator-kafka-init to version 0.49.1-r1.
- Update chainguard strimzi-kafka-operator-kafka-thirdparty-libs to version 0.49.1-r1.
- Update chainguard strimzi-kafka-operator-kafka-thirdparty-libs-cc to version 0.49.1-r5.
- Update chainguard strimzi-kafka-operator-mirror-maker-agent to version 0.49.1-r1.
- Update chainguard strimzi-kafka-operator-topic-operator to version 0.49.1-r1.
- Update chainguard strimzi-kafka-operator-tracing-agent to version 0.49.1-r1.
- Update chainguard strimzi-kafka-operator-user-operator to version 0.49.1-r1.
- Update wolfi apache-pulsar to version 4.1.2-r2.
- Update wolfi apache-pulsar-compat to version 4.1.2-r2.
- Update wolfi confluent-common-docker to version 7.6.9-r1.
- Update wolfi kafka-3.8 to version 3.8.1-r49.
- Update wolfi kafka-4.0 to version 4.0.1-r2.
- Update wolfi kafka-iamguarded-compat-4.0 to version 4.0.1-r2.
- Update wolfi kafka-strimzi-compat to version 0.49.1-r1.
- Update wolfi kafka_exporter-strimzi-compat to version 0.49.1-r1.
- Update wolfi prometheus-jmx-exporter-strimzi-compat to version 0.49.1-r1.
- Update wolfi strimzi-kafka-operator to version 0.49.1-r1.
- Update wolfi strimzi-kafka-operator-cluster-operator to version 0.49.1-r1.
- Update wolfi strimzi-kafka-operator-kafka-agent to version 0.49.1-r1.
- Update wolfi strimzi-kafka-operator-kafka-agent-3 to version 0.49.1-r1.
- Update wolfi strimzi-kafka-operator-kafka-base to version 0.49.1-r1.
- Update wolfi strimzi-kafka-operator-kafka-init to version 0.49.1-r1.
- Update wolfi strimzi-kafka-operator-kafka-thirdparty-libs to version 0.49.1-r1.
- Update wolfi strimzi-kafka-operator-kafka-thirdparty-libs-cc to version 0.49.1-r5.
- Update wolfi strimzi-kafka-operator-mirror-maker-agent to version 0.49.1-r1.
- Update wolfi strimzi-kafka-operator-topic-operator to version 0.49.1-r1.
- Update wolfi strimzi-kafka-operator-tracing-agent to version 0.49.1-r1.
- Update wolfi strimzi-kafka-operator-user-operator to version 0.49.1-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | apache-pulsar |
< 4.1.2-r2 Fix: upgrade to 4.1.2-r2
|
| Chainguard | chainguard | apache-pulsar-compat |
< 4.1.2-r2 Fix: upgrade to 4.1.2-r2
|
| Chainguard | chainguard | confluent-common-docker |
< 7.6.9-r1 Fix: upgrade to 7.6.9-r1
|
| Chainguard | chainguard | hadoop-fips-3.3.6 |
< 3.3.6-r19 Fix: upgrade to 3.3.6-r19
|
| Chainguard | chainguard | kafka-3.7 |
< 3.7.2-r50 Fix: upgrade to 3.7.2-r50
|
| Chainguard | chainguard | kafka-3.8 |
< 3.8.1-r49 Fix: upgrade to 3.8.1-r49
|
| Chainguard | chainguard | kafka-4.0 |
< 4.0.1-r2 Fix: upgrade to 4.0.1-r2
|
| Chainguard | chainguard | kafka-iamguarded-compat-4.0 |
< 4.0.1-r2 Fix: upgrade to 4.0.1-r2
|
| Chainguard | chainguard | kafka-strimzi-compat |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | kafka_exporter-strimzi-compat |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | prometheus-jmx-exporter-strimzi-compat |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | strimzi-kafka-operator |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | strimzi-kafka-operator-cluster-operator |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | strimzi-kafka-operator-kafka-agent |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | strimzi-kafka-operator-kafka-agent-3 |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | strimzi-kafka-operator-kafka-base |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | strimzi-kafka-operator-kafka-init |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | strimzi-kafka-operator-kafka-thirdparty-libs |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | strimzi-kafka-operator-kafka-thirdparty-libs-cc |
< 0.49.1-r5 Fix: upgrade to 0.49.1-r5
|
| Chainguard | chainguard | strimzi-kafka-operator-mirror-maker-agent |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | strimzi-kafka-operator-topic-operator |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | strimzi-kafka-operator-tracing-agent |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Chainguard | chainguard | strimzi-kafka-operator-user-operator |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | apache-pulsar |
< 4.1.2-r2 Fix: upgrade to 4.1.2-r2
|
| Wolfi | wolfi | apache-pulsar-compat |
< 4.1.2-r2 Fix: upgrade to 4.1.2-r2
|
| Wolfi | wolfi | confluent-common-docker |
< 7.6.9-r1 Fix: upgrade to 7.6.9-r1
|
| Wolfi | wolfi | kafka-3.8 |
< 3.8.1-r49 Fix: upgrade to 3.8.1-r49
|
| Wolfi | wolfi | kafka-4.0 |
< 4.0.1-r2 Fix: upgrade to 4.0.1-r2
|
| Wolfi | wolfi | kafka-iamguarded-compat-4.0 |
< 4.0.1-r2 Fix: upgrade to 4.0.1-r2
|
| Wolfi | wolfi | kafka-strimzi-compat |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | kafka_exporter-strimzi-compat |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | prometheus-jmx-exporter-strimzi-compat |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | strimzi-kafka-operator |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | strimzi-kafka-operator-cluster-operator |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | strimzi-kafka-operator-kafka-agent |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | strimzi-kafka-operator-kafka-agent-3 |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | strimzi-kafka-operator-kafka-base |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | strimzi-kafka-operator-kafka-init |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | strimzi-kafka-operator-kafka-thirdparty-libs |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | strimzi-kafka-operator-kafka-thirdparty-libs-cc |
< 0.49.1-r5 Fix: upgrade to 0.49.1-r5
|
| Wolfi | wolfi | strimzi-kafka-operator-mirror-maker-agent |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | strimzi-kafka-operator-topic-operator |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | strimzi-kafka-operator-tracing-agent |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
| Wolfi | wolfi | strimzi-kafka-operator-user-operator |
< 0.49.1-r1 Fix: upgrade to 0.49.1-r1
|
Original advisory text
CGA-5hvw-2376-3qwp
Timeline
Published7 Jan 2026
Updated9 May 2026
First seen9 May 2026
Sources
CGA-5hvw-2376-3qwp · OSV
Track software like this
Free during beta