jmc-8.2.0-18.el9_7.2
エラータID: AXSA:2026-058:01
リリース日:
2026/01/21 Wednesday - 14:40
題名:
jmc-8.2.0-18.el9_7.2
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- lz4-java の Java ベースの展開処理の実装には、データの初期化
処理が欠落しているため、リモートの攻撃者により、情報の漏洩を
可能とする脆弱性が存在します。(CVE-2025-66566)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2025-66566
yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In applications where the output buffer is reused without being cleared, this may lead to disclosure of sensitive data. JNI-based implementations are not affected. This vulnerability is fixed in 1.10.1.
yawkat LZ4 Java provides LZ4 compression for Java. Insufficient clearing of the output buffer in Java-based decompressor implementations in lz4-java 1.10.0 and earlier allows remote attackers to read previous buffer contents via crafted compressed input. In applications where the output buffer is reused without being cleared, this may lead to disclosure of sensitive data. JNI-based implementations are not affected. This vulnerability is fixed in 1.10.1.
追加情報:
N/A
ダウンロード:
SRPMS
- jmc-8.2.0-18.el9_7.2.src.rpm
MD5: 327773afd90d44d3c0f0563289846b39
SHA-256: d28dd84bbd2ab2f8191eb0ac215b2d5e130c14ff34a049f8f838a67b2e8c3722
Size: 401.39 MB
Asianux Server 9 for x86_64
- jmc-8.2.0-18.el9_7.2.x86_64.rpm
MD5: d8549e189d8ffd09c5a489bd81316fcc
SHA-256: 1b1c72b87f9c69d795e1e5960ff0d3670f2d9d1bb34f4e4598bcbb8588a71376
Size: 74.80 MB
English