(karaf-site) branch trunk updated: Sign the CVE-2026-90979 security advisory

[jbonofre]

This is an automated email from the ASF dual-hosted git repository.

jbonofre pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/karaf-site.git


The following commit(s) were added to refs/heads/trunk by this push:
     new b0e5115  Sign the CVE-2026-90979 security advisory
b0e5115 is described below

commit b0e511542dd8de2b712c88c80bdfb872dab58c42
Author: JB Onofré <jbono...@apache.org>
AuthorDate: Mon Sep 28 10:52:37 2026 +0200

    Sign the CVE-2026-90979 security advisory
---
 security/cve-2026-90979.txt | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/security/cve-2026-90979.txt b/security/cve-2026-90979.txt
index e0bb914..0bd6826 100644
--- a/security/cve-2026-90979.txt
+++ b/security/cve-2026-90979.txt
@@ -1,10 +1,13 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
 CVE-2026-90979: Apache Karaf: LDAP filter injection in JAAS LDAP login modules
 
 Severity: moderate
 
 Affected versions:
 
-- Apache Karaf before 4.4.12
+- - Apache Karaf before 4.4.12
 
 Description:
 
@@ -31,3 +34,20 @@ References:
 https://karaf.apache.org/
 https://www.cve.org/CVERecord?id=CVE-2026-90979
 https://issues.apache.org/jira/browse/https://github.com/apache/karaf/pull/2880
+-----BEGIN PGP SIGNATURE-----
+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+=U09B
+-----END PGP SIGNATURE-----