Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Red Hat: RHSA-2023:5170-01 Important: Quarkus 2.13.8 HTTP Bypass

red hat
Calendar Grey September 14, 2023
Dist Redhat Esm H88
Crucial announcement regarding the Red Hat distribution of Quarkus version 2.13.8, featuring vital security patches and improvements.
An update is now available for Red Hat build of Quarkus

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Summary

This release of Red Hat build of Quarkus 2.13.8 includes security updates, bug fixes, and enhancements. For more information, see the release notes page listed in the References section.
Security Fixes:
* CVE-2023-4853 quarkus-http: quarkus: HTTP security policy bypass [quarkus-2.13]

Topics%20covered

Topics Covered

security advisory red hat software update important security impact quarkus http policy bypass

References

https://access.redhat.com/security/cve/CVE-2023-4853 https://access.redhat.com/security/updates/classification#important

Package List


Severity
important
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2023:5170-01
Product: Red Hat build of Quarkus
Advisory URL: https://access.redhat.com/errata/RHSA-2023:5170
Issue date: 2023-09-14

Topic

An update is now available for Red Hat build of Quarkus. Red Hat ProductSecurity has rated this update as having a security impact of Important. ACommon Vulnerability Scoring System (CVSS) base score, which gives adetailed severity rating, is available for each vulnerability. For moreinformation, see the CVE links in the References section.

Topics%20covered

Topics Covered

security advisory red hat software update important security impact quarkus http policy bypass

Relevant Releases Architectures

Bugs Fixed

2238034 - CVE-2023-4853 quarkus: HTTP security policy bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here