Oracle Communications: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2025-70873

  An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier a…

  sqlite3 sqlite Debian Azure Linux
  Mar 12, 2026
• Medium 6.3
  CVE-2026-34481

  Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout

  Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON output when log events contain non-finite floating-point values (NaN, Infinity, or -Infinit…

  Apache Software Foundation Apache Log4j JSON Template Layout spark-4.0-scala-2.13 spark-4.1-scala-2.13 Debian Ubuntu Wolfi Maven
  Apr 10, 2026

Revision history

1. 2026-06-16 #1

   Initiale Fassung

References

• Oracle Critical Security Patch Update Advisory - June 2026 - Appendix Oracle Communications vom 2026-06-16
  https://www.oracle.com/security-alerts/cspujun2026.html#AppendixCGBU