Red Hat build of OptaPlanner 8.38.0 for Quarkus 2.13.8 release and security update is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Red Hat Product Security has rated this update as having an impact of. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat Build of OptaPlanner 8.38.0 SP1 Advisory ID: RHSA-2023:5446-01 Product: Red Hat build of OptaPlanner Advisory URL: https://access.redhat.com/errata/RHSA-2023:5446 Issue date: 2023-10-04 CVE Names: CVE-2023-4853 ===================================================================== 1. Summary: Red Hat build of OptaPlanner 8.38.0 for Quarkus 2.13.8 release and security update is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Red Hat Product Security has rated this update as having an impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. 2. Description: Release of Red Hat build of OptaPlanner 8.38.0 SP1 This release includes security fixes. Security Fix(es): * org.kie.kogito-kogito-apps: quarkus: HTTP security policy bypass (CVE-2023-4853) 3. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 4. Bugs fixed (https://bugzilla.redhat.com/): 2238034 - CVE-2023-4853 quarkus: HTTP security policy bypass 5. References: https://access.redhat.com/security/cve/CVE-2023-4853 https://access.redhat.com/security/updates/classification/#important 6. Contact: The Red Hat security contact is . More contact details athttps://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJlHdiIAAoJENzjgjWX9erEHWMP+wZBfZ+ZvAFMsjKwVgya6Q81 Z2QgItsc42kY/BSA0bEN8ntMs970onO2A8kI1OSi03ABugtyWT3k0V55UmpxuJZd SDpsdfgYxMCFRljUYzT0Z5u3iMTlN0eS/PKG/3X6L3M7DTfHHvbmNWutGAFM8S1y lJf8lyFHPzP6lGSVzralmppFhiZddsniEZbrGudV9so/splybAutRLMIZRyE744l dvDrEDyIFr+uG6UC+T+Fi1czj7BCNGJVOmEH3oTDAXnEUJCs+GFRwAcRzbaPpOnL FdvgS1t60FLiNjfwa3RfWXB21mw5jvIktqWuvUakuAiQD8ERULOOot9cqNLv6J9F DjKYKZY1WeR0GcqtmR/YWRVSqCpFMFril999FwHSAaSHzxLUv2dM7+UdIf/sLXoa RJFxhMv2NuC58pTWKgpXMbRT1Ik6PJawcwGz6eBi1XY3iFNGxWdnO/+76Gc+F34q R5bpyGS736V3yujHkZ9ucIAyWz0oEmGiZ3MomLqdAwL+cok4R247d/5/I5fmPYyk 1W+GORmOpr8iHFRythNpGXxkToUx9OyO5xd/6VSpsraRt8KWsNwS8Jht3o8DtC+c Ub71d64JqyKYNvWInJmhbfNeXBXPbbelikNWm0yWwe8h6u9e+I06pZJTnzSXT3SR bU+anCGr0RTy7THHUnjt =W+I2 -----END PGP SIGNATURE----- -- RHSA-announce mailing list
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For more. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat build of Quarkus 2.13.8 release and security update Advisory ID: RHSA-2023:5170-01 Product: Red Hat build of Quarkus Advisory URL: https://access.redhat.com/errata/RHSA-2023:5170 Issue date: 2023-09-14 CVE Names: CVE-2023-4853 ===================================================================== 1. Summary: An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. For more information, see the CVE links in the References section. 2. Description: This release of Red Hat build of Quarkus 2.13.8 includes security updates, bug fixes, and enhancements. For more information, see the release notes page listed in the References section. Security Fixes: * CVE-2023-4853 quarkus-http: quarkus: HTTP security policy bypass [quarkus-2.13] 3. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 4. Bugs fixed (https://bugzilla.redhat.com/): 2238034 - CVE-2023-4853 quarkus: HTTP security policy bypass 5. References: https://access.redhat.com/security/cve/CVE-2023-4853 https://access.redhat.com/security/updates/classification#important 6. Contact: The Red Hat security contact is . More contact details athttps://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJlAyZNAAoJENzjgjWX9erEHr8P/itG6Q4VoXk3hcKNNTOvX3c2 li4ZZe3DPXAetvHB3vQQ40XS4xj8A9dgbgTQN+s+iWy86MomdFny4EgqcF4a2jjV Flf2X4qQoyP8hdRai3pnxwt0obk+ppsIl+W9e2vHwQjvcsa5FATHrzfNEbgDLNAB Mxz62PB7+FWVfSUfL3iJwubZnuTlKeue6+ZRYbeS2ZuTgg0bvRuOKLdJLXfsrlzG OO573SxHVUAZxnr2ksy+DyechbbI1VC4ZdyVQPJxYCrWEaFFW8yBXYwYiYvyRYRT J48jegHDtrVbs/dH5fFHOC1B4PkOWucWw4jDlavsP00vrYkFc/2K4JaJ/IHzJEn4 WmAxWBWBSPMGeRoyitwq4IrlKmy75eDIWIj4LJVCae7bzyxaPbwLL2TzJqCUTFS5 v3IS1ko2eyD3oBY4s9m0MCjP2KhWWRuO5iwj1a4Yp1FStgL68KU/EyaM50kQ7xvN VIecXPoxBqttfcJZr2ajnHs5A9FuSBRgA0kzzMyBuMbjljp5nZrzz4u3l/weO3RB x4f9FbL3mnwNll4iByqX1ggvGMGGuUFJvgAKy/sCMfseoctvmNmYm6mrjm/AXFm8 PCG9pt2sdNPHc80AytMa6lpq8yORnllL+4ZX2KgwgO7y3QepOqU/ooevleHyW9/E 6Yn1S7KvFUZfdM0gRstw =/zBa -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Get the latest Linux and open source security news straight to your inbox.