Application Platforms & Middleware
Dassault Systèmes Warns of Tuleap Command Injection
Affected Tuleap Enterprise builds permit operating-system command injection, but the public notice supplies no exact replacement build. Record the complete installed build and obtain the supported fix and upgrade path from the vendor.
Apache Neethi 3.2.4 Addresses Five Policy Processing Flaws
Crafted policies can exhaust memory, multiply processing work or keep remote fetches open in Apache Neethi. Update the deployed dependency and validate parsing, normalization and reference handling with approved inputs, considering which policy sources the application trusts.
Temporal Discloses Eight Authorization and Availability Flaws
Temporal's eight issues span namespace authorization, callbacks, worker commands and resource exhaustion. Match each version and configuration prerequisite, preserve existing workflow settings, and apply the corresponding Server or library fix rather than one assumed universal update.
Apache MINA Releases Bound Zlib Decompression
Apache MINA's inbound CompressionFilter can allocate unbounded memory while expanding data. Upgrade the matching branch and configure a decompressed-size limit; validate ordinary traffic and limit handling outside production rather than treating a dependency update as sufficient.