RHSA-2023:1303: Important: Red Hat Data Grid 7.3.10 security update
Red Hat Data Grid is an in-memory, distributed, NoSQL datastore solution. It increases application response times and allows for dramatically improving performance while providing availability, reliability, and elastic scale.Data Grid 7.3.10 replaces Data Grid 7.3.9 and includes security fixes. Find out more about Data Grid 7.3.10 in the Release Notes [3].Security Fix(es): xstream: Arbitrary code execution via unsafe deserialization of sun.tracing. [jdg-7] (CVE-2021-39144) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Red Hat Data Gridto a version that resolves this vulnerability.Fixed in 7.3.10
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:1303?
The severity of RHSA-2023:1303 is classified as important.
What vulnerabilities are addressed in RHSA-2023:1303?
RHSA-2023:1303 addresses specific security vulnerabilities affecting Red Hat Data Grid.
How do I apply the fix for RHSA-2023:1303?
To fix RHSA-2023:1303, users should update to Data Grid version 7.3.10.
Is RHSA-2023:1303 applicable to all versions of Red Hat Data Grid?
RHSA-2023:1303 specifically applies to Red Hat Data Grid version 7.3.9.
What are the potential risks of not addressing RHSA-2023:1303?
Not addressing RHSA-2023:1303 may leave systems vulnerable to security exploits.