RHSA-2024:0719: Moderate: Migration Toolkit for Runtimes security, bug fix and enhancement update

Published Feb 7, 2024

Updated

Migration Toolkit for Runtimes 1.2.4 ImagesSecurity Fix(es): nodejs-semver: Regular expression denial of service (CVE-2022-25883) jackson-databind: denial of service via cylic dependencies (CVE-2023-35116) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Other sources

Moderate: Migration Toolkit for Runtimes security, bug fix and enhancement update

— Red Hat

Affected Software

1 affected component

Red Hat Red Hat Migration Toolkit for Runtimes

Remediation

Event History

Feb 7, 2024

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·02:57 PM

Frequently Asked Questions

What is the severity of RHSA-2024:0719?

RHSA-2024:0719 addresses vulnerabilities that can lead to denial of service, indicating a serious level of concern for affected systems.

How do I fix RHSA-2024:0719?

To fix RHSA-2024:0719, update your Red Hat Migration Toolkit for Runtimes to the latest version as specified in the advisory.

What vulnerabilities are addressed in RHSA-2024:0719?

RHSA-2024:0719 addresses regular expression denial of service in nodejs-semver and denial of service via cyclic dependencies in jackson-databind.

Which software is affected by RHSA-2024:0719?

RHSA-2024:0719 affects the Red Hat Migration Toolkit for Runtimes.

When was RHSA-2024:0719 released?

RHSA-2024:0719 was released as an advisory in 2024 to address critical security vulnerabilities.