RHSA-2022:8957: Important: Red Hat build of Quarkus Platform 2.7.6.SP3 and security update
This release of Red Hat build of Quarkus 2.7.6.SP3 includes security updates, bug fixes, and enhancements. For more information, see the release notes page listed in the References section.Security Fix(es): CVE-2022-4147 quarkus-vertx-http: Security misconfiguration of CORS : OWASP A052021 level in Quarkus CVE-2022-4116 quarkusdevui: Dev UI Config Editor is vulnerable to drive-by localhost attacks leading to RCE CVE-2022-45047 mina-sshd: Java unsafe deserialization vulnerability For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVE page(s)listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:8957?
The severity of RHSA-2022:8957 is classified as important due to the potential impact on the security of applications using the affected Quarkus version.
How do I fix RHSA-2022:8957?
To fix RHSA-2022:8957, you should update to Quarkus version 2.7.6.SP4 or higher where the security vulnerabilities are addressed.
What vulnerabilities are addressed in RHSA-2022:8957?
RHSA-2022:8957 addresses CVE-2022-4147 among other security fixes and enhancements.
What is affected by RHSA-2022:8957?
RHSA-2022:8957 affects applications built using the Red Hat build of Quarkus version 2.7.6.SP3.
Is RHSA-2022:8957 a mandatory update?
While not always mandatory, it is strongly recommended to apply RHSA-2022:8957 to mitigate the identified security vulnerabilities.