Red Hat Enterprise Linux (Quarkus): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 3

• High 8.8
  CVE-2025-12183

  org.lz4:lz4-java - Out-of-Bounds Memory Access

  Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.

  zipkin spark-4.0-scala-2.13 spark-4.1-scala-2.13 strimzi-kafka-operator-kafka-thirdparty-libs-cc Debian Ubuntu Wolfi Maven
  Nov 28, 2025
• High 8.2
  CVE-2025-66566

  yawkat LZ4 Java has a possible information leak in Java safe decompressor

  yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In a…

  yawkat lz4-java zipkin spark-4.0-scala-2.13 Debian Ubuntu Wolfi Maven
  Dec 5, 2025
• Low 2.3
  CVE-2025-11966

  Vert.x-Web vulnerable to Stored Cross-site Scripting in directory listings via file names

  In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted into generated HTML without proper escaping in the href, title, and link attributes. An attacker who can create or rename…

  Eclipse Foundation Vert.x keycloak-26.4-iamguarded-compat strimzi-kafka-operator-kafka-thirdparty-libs-cc Wolfi Maven
  Oct 22, 2025

Revision history

1. 2026-07-23 #12

   Neue Updates von IBM aufgenommen

2. 2026-07-01 #11

   Neue Updates von IBM aufgenommen

3. 2026-05-06 #10

   Neue Updates von IBM aufgenommen

4. 2026-03-05 #9

   Neue Updates von Red Hat aufgenommen

5. 2026-02-04 #8

   Neue Updates von Red Hat aufgenommen

6. 2026-02-03 #7

   Neue Updates von Red Hat aufgenommen

7. 2026-02-02 #6

   Neue Updates von IBM aufgenommen

8. 2026-01-19 #5

   Neue Updates von Oracle Linux aufgenommen

9. 2026-01-18 #4

   Neue Updates von Red Hat aufgenommen

10. 2026-01-15 #3

    Neue Updates von Red Hat aufgenommen

11. 2026-01-12 #2

    Neue Updates von Red Hat aufgenommen

12. 2026-01-06 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:0131 vom 2026-01-06
  https://access.redhat.com/errata/RHSA-2026:0131
• Red Hat Security Advisory RHSA-2026:0134 vom 2026-01-06
  https://access.redhat.com/errata/RHSA-2026:0134
• Red Hat Security Advisory RHSA-2026:0467 vom 2026-01-12
  https://access.redhat.com/errata/RHSA-2026:0467
• Red Hat Security Advisory RHSA-2026:0468 vom 2026-01-12
  https://access.redhat.com/errata/RHSA-2026:0468
• Red Hat Security Advisory RHSA-2026:0726 vom 2026-01-15
  https://access.redhat.com/errata/RHSA-2026:0726
• Red Hat Security Advisory RHSA-2026:0761 vom 2026-01-19
  https://access.redhat.com/errata/RHSA-2026:0761
• Red Hat Security Advisory RHSA-2026:0751 vom 2026-01-19
  https://access.redhat.com/errata/RHSA-2026:0751
• Red Hat Security Advisory RHSA-2026:0752 vom 2026-01-19
  https://access.redhat.com/errata/RHSA-2026:0752
• Oracle Linux Security Advisory ELSA-2026-0752 vom 2026-01-20
  http://linux.oracle.com/errata/ELSA-2026-0752.html
• IBM Security Bulletin 7257968 vom 2026-02-02
  https://www.ibm.com/support/pages/node/7257968
• Red Hat Security Advisory RHSA-2026:1823 vom 2026-02-03
  https://access.redhat.com/errata/RHSA-2026:1823
• Red Hat Security Advisory RHSA-2026:1870 vom 2026-02-04
  https://access.redhat.com/errata/RHSA-2026:1870
• Red Hat Security Advisory RHSA-2026:1871 vom 2026-02-04
  https://access.redhat.com/errata/RHSA-2026:1871
• Red Hat Security Advisory RHSA-2026:1935 vom 2026-02-04
  https://access.redhat.com/errata/RHSA-2026:1935
• Red Hat Security Advisory RHSA-2026:3951 vom 2026-03-05
  https://access.redhat.com/errata/RHSA-2026:3951
• IBM Security Bulletin 7271909 vom 2026-05-06
  https://www.ibm.com/support/pages/node/7271909
• IBM Security Bulletin 7278613 vom 2026-07-01
  https://www.ibm.com/support/pages/node/7278613
• IBM Security Bulletin 7280950 vom 2026-07-23
  https://www.ibm.com/support/pages/node/7280950