Red Hat Security Advisory

RHSA-2026:4285

Red Hat build of Debezium 3.2.7 release

Released 2026-03-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Build of Debezium 3.2

Fixes 2 records

TI-2026-22089 CVE-2026-27727 · GHSA-m2cm-222f-qw44

mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

HIGH 74

mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote `factoryClassLocation` values, by which code can be downl…

CVSS 4.0HIGH 8.9 Network High privileges No interaction EPSS 0.00977 Published 2026-02-25 Partial fix · 0.4.0 CWE-74

TI-2026-22181 CVE-2026-27830 · GHSA-5476-xc4j-rqcv

c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property

MEDIUM 41

c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and `javax.naming.Reference` instances.

CVSS 4.0HIGH 8.9 Adjacent network Low privileges No interaction EPSS 0.00595 Published 2026-02-26 Partial fix · 0.12.0 CWE-502