Security update for c3p0 and mchange-commons
This update for c3p0 and mchange-commons fixes the following issues: c3p0: - Security issues fixed: - CVE-2026-27830: Fixed unsafe object deserialization (bsc#1258942) - Fix the null pointer exception in the userOverridesAsString method (bsc#1259313). mchange-commons: - Security issues fixed: - CVE-2026-27727: Disabled remote ClassLoading when dereferencing javax.naming.Reference instances (bsc#1258913)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for c3p0 and mchange-commons fixes the following issues: c3p0: - Security issues fixed: - CVE-2026-27830: Fixed unsafe object deserialization (bsc#1258942) - Fix the null pointer exception in the userOverridesAsString method (bsc#1259313). mchange-commons: - Security issues fixed: - CVE-2026-27727: Disabled remote ClassLoading when dereferencing javax.naming.Reference instances (bsc#1258913)
05 / REFERENCES