Red Hat Security Advisory

RHSA-2026:20568

jmc security update

Released 2026-05-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) jmc-8.2.0-19.el9_8.2

Fixes 2 records

TI-2026-01972 CVE-2026-2332 · GHSA-355h-qmc2-wpwf

HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

HIGH 74

In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funky-chunks.html * https://…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01305 Published 2026-04-14 Partial fix · 12.1.7, 12.0.33 +3 CWE-444

TI-2025-40977 CVE-2025-66566 · GHSA-cmp6-m4wj-q63q

yawkat LZ4 Java has a possible information leak in Java safe decompressor

MEDIUM 43

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00649 Published 2025-12-05 Partial fix · 1.10.1 CWE-201