Which third-party and open source components ship with Stratusphere UX, and which CVEs does each release resolve?
This article is the official inventory of the third-party and open source software that ships with each Stratusphere UX 6.7.1 release, and the CVEs each release resolves. Each release entry links to a downloadable archive with that release's component list and vulnerability scan results. The current release is 6.7.1-3; earlier releases stay listed so you can match a deployment to the inventory it shipped with.
Related articles
For the fixes and upgrade procedure in each hotfix and security update, see the Stratusphere Hotfix & Security Update List. For support dates, see End-Of-Life For Versions of Stratusphere.
For the fixes and upgrade procedure in each hotfix and security update, see the Stratusphere Hotfix & Security Update List. For support dates, see End-Of-Life For Versions of Stratusphere.
📄 Contents
6.7.1-3 — Current Release
| Item | Details |
|---|---|
| Release | 6.7.1-3 | Build 6.7.1-3.20261001 | Security update ✓ Current |
| Download | stratusphere-ux-6.7.1-3-tps-oss-security-scans.zip |
| Contents | Contains: stratusphere-ux-6.7.1-3-third-party-open-source-software.csv (third-party and open source software list) and stratusphere-ux-6.7.1-3-nessus-security-scan-report.2026-09-30.xlsx (Nessus security scan report, September 30, 2026). |
| Changes from prior release | Compared with 6.7.1-2: appliance service rebuilt with Go 1.26.8 and updated google.golang.org/grpc (v1.82.1 → v1.83.2), golang.org/x/crypto (v0.54.0 → v0.57.0), github.com/klauspost/compress (v1.18.4 → v1.18.7), golang.org/x/net, golang.org/x/sys, golang.org/x/text, and google.golang.org/genproto. NATS server upgraded 2.12.8 → 2.14.7 (nats CLI 0.3.1 → 0.5.0, nats-top rebuilt with github.com/klauspost/compress v1.20.0). Includes Oracle Linux 8 security updates (34 advisories, including kernel 4.18.0-553.168.1). |
| CVEs addressed |
206 CVEs resolved in 6.7.1-3Show CVE listCVE-2026-93990, CVE-2026-89480, CVE-2026-86144, CVE-2026-86143, CVE-2026-86140, CVE-2026-86138, CVE-2026-82717, CVE-2026-81642, CVE-2026-81634, CVE-2026-80714, CVE-2026-74860, CVE-2026-74581, CVE-2026-74556, CVE-2026-74480, CVE-2026-73282, CVE-2026-73078, CVE-2026-73076, CVE-2026-73072, CVE-2026-72298, CVE-2026-72129, CVE-2026-72098, CVE-2026-71227, CVE-2026-71226, CVE-2026-71225, CVE-2026-68426, CVE-2026-68388, CVE-2026-68376, CVE-2026-68363, CVE-2026-68343, CVE-2026-68315, CVE-2026-68300, CVE-2026-68143, CVE-2026-68121, CVE-2026-68117, CVE-2026-66046, CVE-2026-64563, CVE-2026-64379, CVE-2026-64320, CVE-2026-64298, CVE-2026-64277, CVE-2026-64276, CVE-2026-64268, CVE-2026-64191, CVE-2026-64189, CVE-2026-64117, CVE-2026-64113, CVE-2026-64048, CVE-2026-64018, CVE-2026-64015, CVE-2026-64007, CVE-2026-64002, CVE-2026-63971, CVE-2026-63921, CVE-2026-63919, CVE-2026-63917, CVE-2026-63913, CVE-2026-63889, CVE-2026-63888, CVE-2026-63887, CVE-2026-63886, CVE-2026-63802, CVE-2026-63801, CVE-2026-63800, CVE-2026-63388, CVE-2026-63387, CVE-2026-63385, CVE-2026-63384, CVE-2026-63383, CVE-2026-63382, CVE-2026-59999, CVE-2026-59995, CVE-2026-59857, CVE-2026-59850, CVE-2026-59848, CVE-2026-59847, CVE-2026-59846, CVE-2026-59845, CVE-2026-59844, CVE-2026-59843, CVE-2026-58472, CVE-2026-58471, CVE-2026-58469, CVE-2026-58015, CVE-2026-58014, CVE-2026-58013, CVE-2026-58012, CVE-2026-58011, CVE-2026-58010, CVE-2026-56865, CVE-2026-56864, CVE-2026-56862, CVE-2026-56860, CVE-2026-56859, CVE-2026-56858, CVE-2026-56853, CVE-2026-56132, CVE-2026-55892, CVE-2026-53399, CVE-2026-53397, CVE-2026-53392, CVE-2026-53391, CVE-2026-53275, CVE-2026-53268, CVE-2026-53246, CVE-2026-53239, CVE-2026-53228, CVE-2026-53223, CVE-2026-53192, CVE-2026-53189, CVE-2026-53185, CVE-2026-53182, CVE-2026-53176, CVE-2026-53131, CVE-2026-53091, CVE-2026-53075, CVE-2026-53002, CVE-2026-52991, CVE-2026-52986, CVE-2026-52947, CVE-2026-52942, CVE-2026-52924, CVE-2026-52920, CVE-2026-52917, CVE-2026-52912, CVE-2026-52859, CVE-2026-52490, CVE-2026-50252, CVE-2026-50219, CVE-2026-46600, CVE-2026-46306, CVE-2026-46266, CVE-2026-46149, CVE-2026-46120, CVE-2026-45970, CVE-2026-43493, CVE-2026-43339, CVE-2026-43233, CVE-2026-43133, CVE-2026-42504, CVE-2026-42501, CVE-2026-42499, CVE-2026-41992, CVE-2026-41991, CVE-2026-39836, CVE-2026-39822, CVE-2026-39820, CVE-2026-34502, CVE-2026-34501, CVE-2026-33818, CVE-2026-33814, CVE-2026-33811, CVE-2026-32327, CVE-2026-32283, CVE-2026-32281, CVE-2026-32280, CVE-2026-31663, CVE-2026-31566, CVE-2026-28420, CVE-2026-27145, CVE-2026-27144, CVE-2026-27143, CVE-2026-27140, CVE-2026-25679, CVE-2026-23103, CVE-2026-20917, CVE-2026-20901, CVE-2026-20898, CVE-2026-20885, CVE-2026-20775, CVE-2026-20760, CVE-2026-20734, CVE-2026-20716, CVE-2026-20715, CVE-2026-20713, CVE-2026-20712, CVE-2026-20708, CVE-2026-20707, CVE-2026-20705, CVE-2026-18508, CVE-2026-18477, CVE-2026-16118, CVE-2026-15588, CVE-2026-13221, CVE-2026-11979, CVE-2026-11940, CVE-2026-11824, CVE-2026-11822, CVE-2026-9499, CVE-2026-6653, CVE-2026-5704, CVE-2025-71132, CVE-2025-71127, CVE-2025-68745, CVE-2025-68121, CVE-2025-61732, CVE-2025-49506, CVE-2025-45582, CVE-2025-35973, CVE-2025-31938, CVE-2025-31936, CVE-2025-31356, CVE-2025-22871, CVE-2025-5278, CVE-2024-57849, CVE-2024-56602, CVE-2024-53161 |
Superseded Releases
Each hotfix and security update is a full upgrade image, so a later release includes every CVE fix listed for earlier 6.7.1 releases.
6.7.1-2 (Build 20260825) SUPERSEDED BY 6.7.1-3
| Item | Details |
|---|---|
| Release | 6.7.1-2 | Build 6.7.1-2.20260825 | Hotfix |
| Download | stratusphere-ux-6.7.1-2-tps-oss-security-scans.zip |
| Contents | Contains: stratusphere-ux-6.7.1-2-third-party-and-open-source-software.csv (third-party and open source software list) and stratusphere-ux-6.7.1-2-nessus-scan-results.csv (Nessus security scan results). |
| Changes from prior release | Compared with 6.7.1-1: appliance service dependency updates, primarily golang.org/x/crypto v0.50.0 → v0.52.0, plus Oracle Linux 8 security updates. |
| CVEs addressed |
190 CVEs resolved in 6.7.1-2Show CVE listCVE-2026-70907, CVE-2026-64530, CVE-2026-64496, CVE-2026-64219, CVE-2026-63884, CVE-2026-63879, CVE-2026-63807, CVE-2026-61308, CVE-2026-60589, CVE-2026-60147, CVE-2026-60075, CVE-2026-59858, CVE-2026-58016, CVE-2026-57456, CVE-2026-57455, CVE-2026-55693, CVE-2026-55655, CVE-2026-55653, CVE-2026-54411, CVE-2026-54371, CVE-2026-54370, CVE-2026-54369, CVE-2026-54291, CVE-2026-53374, CVE-2026-53359, CVE-2026-53329, CVE-2026-53266, CVE-2026-53166, CVE-2026-53136, CVE-2026-53071, CVE-2026-53059, CVE-2026-53016, CVE-2026-53009, CVE-2026-53006, CVE-2026-52993, CVE-2026-52923, CVE-2026-52858, CVE-2026-50722, CVE-2026-50721, CVE-2026-49975, CVE-2026-49844, CVE-2026-48962, CVE-2026-48864, CVE-2026-47167, CVE-2026-47162, CVE-2026-47063, CVE-2026-47059, CVE-2026-47058, CVE-2026-47057, CVE-2026-47027, CVE-2026-47021, CVE-2026-47010, CVE-2026-46968, CVE-2026-46483, CVE-2026-46259, CVE-2026-46227, CVE-2026-46209, CVE-2026-46189, CVE-2026-46150, CVE-2026-46117, CVE-2026-46116, CVE-2026-46113, CVE-2026-46086, CVE-2026-46054, CVE-2026-45991, CVE-2026-45984, CVE-2026-44690, CVE-2026-44631, CVE-2026-44390, CVE-2026-44186, CVE-2026-44185, CVE-2026-43958, CVE-2026-43951, CVE-2026-43499, CVE-2026-43450, CVE-2026-43206, CVE-2026-43198, CVE-2026-43116, CVE-2026-43112, CVE-2026-42536, CVE-2026-42534, CVE-2026-41989, CVE-2026-41411, CVE-2026-41292, CVE-2026-41254, CVE-2026-40622, CVE-2026-34980, CVE-2026-34480, CVE-2026-34356, CVE-2026-34355, CVE-2026-34059, CVE-2026-33857, CVE-2026-33416, CVE-2026-33007, CVE-2026-31692, CVE-2026-31411, CVE-2026-29169, CVE-2026-28780, CVE-2026-28390, CVE-2026-26740, CVE-2026-23216, CVE-2026-19385, CVE-2026-18408, CVE-2026-18024, CVE-2026-17523, CVE-2026-16313, CVE-2026-16241, CVE-2026-16239, CVE-2026-16238, CVE-2026-15816, CVE-2026-15742, CVE-2026-15741, CVE-2026-15308, CVE-2026-14957, CVE-2026-14739, CVE-2026-14681, CVE-2026-14680, CVE-2026-14679, CVE-2026-14678, CVE-2026-14677, CVE-2026-14676, CVE-2026-14673, CVE-2026-14672, CVE-2026-14671, CVE-2026-14670, CVE-2026-14669, CVE-2026-14668, CVE-2026-14666, CVE-2026-14664, CVE-2026-14663, CVE-2026-14662, CVE-2026-14476, CVE-2026-14474, CVE-2026-14380, CVE-2026-13321, CVE-2026-13204, CVE-2026-12912, CVE-2026-12413, CVE-2026-11940, CVE-2026-11721, CVE-2026-11622, CVE-2026-10846, CVE-2026-10723, CVE-2026-9698, CVE-2026-8286, CVE-2026-8177, CVE-2026-6471, CVE-2026-6470, CVE-2026-6469, CVE-2026-6464, CVE-2026-6238, CVE-2026-5928, CVE-2026-5450, CVE-2026-5435, CVE-2026-4438, CVE-2026-4437, CVE-2026-4046, CVE-2025-71089, CVE-2025-71066, CVE-2025-66200, CVE-2025-65082, CVE-2025-58098, CVE-2025-55753, CVE-2025-54518, CVE-2025-53020, CVE-2025-49812, CVE-2025-49630, CVE-2025-40026, CVE-2025-39902, CVE-2025-23048, CVE-2025-14512, CVE-2025-14087, CVE-2025-13601, CVE-2025-13151, CVE-2025-11561, CVE-2025-10263, CVE-2025-6170, CVE-2024-47252, CVE-2024-42516, CVE-2024-39573, CVE-2024-38477, CVE-2024-38476, CVE-2024-38475, CVE-2024-38474, CVE-2024-38473, CVE-2024-27316, CVE-2023-45802, CVE-2023-44487, CVE-2023-38709, CVE-2023-25690 |
6.7.1-1 (GA, Build 20260706) SUPERSEDED BY 6.7.1-2
| Item | Details |
|---|---|
| Release | 6.7.1-1 | Build 6.7.1-1.20260706 | GA release, July 15, 2026 |
| Download | stratusphere-ux-6.7.1-1-tps-oss-security-scans.zip |
| Contents | Contains: stratusphere-ux-6.7.1-1-third-party-open-source-software.csv (third-party and open source software list) and stratusphere-ux-6.7.1-1-nessus-scan-results.csv (Nessus security scan results). |
| Changes from prior release | Initial 6.7.1 release. CVEs as listed in the Stratusphere Release Notes v6.7.1-1. |
| CVEs addressed |
152 CVEs resolved in 6.7.1-1Show CVE listCVE-2026-46333, CVE-2026-46300, CVE-2026-46243, CVE-2026-46181, CVE-2026-46152, CVE-2026-46125, CVE-2026-46056, CVE-2026-45852, CVE-2026-45447, CVE-2026-45186, CVE-2026-43329, CVE-2026-43284, CVE-2026-43190, CVE-2026-43163, CVE-2026-43158, CVE-2026-43125, CVE-2026-43110, CVE-2026-43051, CVE-2026-43038, CVE-2026-43037, CVE-2026-43027, CVE-2026-43020, CVE-2026-42959, CVE-2026-42944, CVE-2026-42015, CVE-2026-42014, CVE-2026-42013, CVE-2026-42012, CVE-2026-42011, CVE-2026-42010, CVE-2026-42009, CVE-2026-40356, CVE-2026-40355, CVE-2026-40164, CVE-2026-39979, CVE-2026-35535, CVE-2026-35414, CVE-2026-35388, CVE-2026-35387, CVE-2026-35386, CVE-2026-35385, CVE-2026-35177, CVE-2026-34982, CVE-2026-34480, CVE-2026-34478, CVE-2026-34268, CVE-2026-34059, CVE-2026-34032, CVE-2026-33857, CVE-2026-33846, CVE-2026-33845, CVE-2026-33416, CVE-2026-33007, CVE-2026-32778, CVE-2026-32777, CVE-2026-32776, CVE-2026-31787, CVE-2026-31786, CVE-2026-31709, CVE-2026-31685, CVE-2026-31684, CVE-2026-31669, CVE-2026-31613, CVE-2026-31581, CVE-2026-31532, CVE-2026-31431, CVE-2026-31408, CVE-2026-31402, CVE-2026-28780, CVE-2026-25210, CVE-2026-24515, CVE-2026-23868, CVE-2026-23865, CVE-2026-23455, CVE-2026-23401, CVE-2026-23392, CVE-2026-23270, CVE-2026-23243, CVE-2026-23191, CVE-2026-22990, CVE-2026-22984, CVE-2026-22021, CVE-2026-22018, CVE-2026-22016, CVE-2026-22013, CVE-2026-22007, CVE-2026-10118, CVE-2026-6638, CVE-2026-6637, CVE-2026-6575, CVE-2026-6479, CVE-2026-6478, CVE-2026-6477, CVE-2026-6476, CVE-2026-6475, CVE-2026-6474, CVE-2026-6473, CVE-2026-6472, CVE-2026-6100, CVE-2026-5260, CVE-2026-5121, CVE-2026-4878, CVE-2026-4786, CVE-2026-4775, CVE-2026-4424, CVE-2026-4224, CVE-2026-4046, CVE-2026-3833, CVE-2026-3644, CVE-2026-2297, CVE-2026-1519, CVE-2026-1502, CVE-2026-0672, CVE-2025-71116, CVE-2025-68741, CVE-2025-68724, CVE-2025-68366, CVE-2025-68347, CVE-2025-68183, CVE-2025-59375, CVE-2025-53020, CVE-2025-40252, CVE-2025-39981, CVE-2025-21858, CVE-2025-15282, CVE-2025-14512, CVE-2025-14087, CVE-2025-13837, CVE-2025-10966, CVE-2025-10911, CVE-2025-10148, CVE-2025-9714, CVE-2025-9086, CVE-2025-6075, CVE-2024-41073, CVE-2024-34459, CVE-2024-33602, CVE-2024-33601, CVE-2024-33600, CVE-2024-33599, CVE-2024-5535, CVE-2024-4741, CVE-2024-1086, CVE-2024-0565, CVE-2023-53781, CVE-2023-51042, CVE-2023-6931, CVE-2023-6546, CVE-2022-38096, CVE-2021-33631, CVE-2006-10003, CVE-2006-10002 |
Open Source Software Usage
Stratusphere UX uses industry-standard open source technologies, such as the Linux operating system, PostgreSQL, Apache Tomcat, and OpenSSL, alongside Liquidware's own code and licensed third-party libraries. Open source components make up a fraction of the product's code base.
All open source components in Stratusphere are supported under your Liquidware support agreement, the same as the rest of the product. Liquidware tracks security advisories for these components and ships updates in each hotfix and security update. Once a third-party component reaches its vendor's end-of-life, Liquidware can no longer address its vulnerabilities; see End-Of-Life For Versions of Stratusphere.
| Product | Liquidware Stratusphere UX |
| Applies To | Stratusphere 6.7.1 and later |
| Updated | October 22, 2026 |