RHSA-2022:6819: Important: Red Hat AMQ Streams 2.2.0 release and security update

First published: Wed Oct 05 2022(Updated: )

Red Hat AMQ Streams, based on the Apache Kafka project, offers a distributed backbone that allows microservices and other applications to share data with extremely high throughput and extremely low latency. <br>This release of Red Hat AMQ Streams 2.2.0 serves as a replacement for Red Hat AMQ Streams 2.1.0, and includes security and bug fixes, and enhancements.<br>Security Fix(es):<br><li> kafka: Unauthenticated clients may cause OutOfMemoryError on brokers (CVE-2022-34917)</li> <li> jackson-databind: denial of service via a large depth of nested objects (CVE-2020-36518)</li> <li> netty: world readable temporary file containing sensitive data (CVE-2022-24823)</li> <li> com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson (CVE-2022-25647)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/redhat-errata
• anchor-id/RHSA-2022:6819
• agent/references