Stay Secure with the Latest Linux Advisories

security advisoryupdatered hat

Red Hat Build of OptaPlanner 8.38.0 RHSA-2023:4200-01 Important DoS Issue

Red Hat Build of OptaPlanner 8.38.0 for Quarkus 2.13.8 release and security update is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Red Hat Product Security has rated this update as having an impact of. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: Red Hat Build of OptaPlanner 8.38.0 for Quarkus 2.13.8 security update Advisory ID: RHSA-2023:4200-01 Product: Red Hat build of OptaPlanner Advisory URL: https://access.redhat.com/errata/RHSA-2023:4200 Issue date: 2023-07-18 CVE Names: CVE-2023-20883 ==================================================================== 1. Summary: Red Hat Build of OptaPlanner 8.38.0 for Quarkus 2.13.8 release and security update is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Red Hat Product Security has rated this update as having an impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Description: A new release for Red Hat Build of OptaPlanner 8.38.0 for Quarkus 2.13.8 including security updates is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Red Hat Product Security has rated this update as having an impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Security Fix(es): * CVE-2023-20883 spring-boot: Spring Boot Welcome Page DoS Vulnerability 3. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, referto: https://access.redhat.com/articles/11258 4. Bugs fixed (https://bugzilla.redhat.com/): 2209342 - CVE-2023-20883 spring-boot: Spring Boot Welcome Page DoS Vulnerability 5. JIRA issues fixed (https://redhat.atlassian.net/jira/projects): RHBOP-42 - Remove javadoc references on upstream BOM RHBOP-49 - Include sources for antlr-runtime.jar to maven-repo.zip RHBOP-50 - Include sources for jfreechart.jar to maven-repo.zip RHBOP-52 - [PLANNER-2899]Nearby selection for list variable 6. References: https://access.redhat.com/security/cve/CVE-2023-20883 https://access.redhat.com/security/updates/classification/#important 7. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJktsBeAAoJENzjgjWX9erE/FIP/2sQQ2Cmytsm1Qa7oEfwoo/Y AuLAtfh5Lh4YswqxSm1G6yGSvMBvfiqXb1o/P8xQ/HXZ0I2AP+70aaxuINoztkdF m9mTYJ8+7jzqLAbIDm6yQ7GITGs/O5BNChwfP8pcT4cqWyAyACJcgtIu9Kkv0AZG QQSKDKrjyB7ItSj5tXZ7U7EARrVFKRpZcMVcRqJaz6wmy5HNIT/TAfHCmdAVeQfm KkhGKYxarS5ZFrJtTRoMZsUUA4vzW3AWLVwdKidwa0tUMxZ/9Q5cpmll9ZtwnzN1 fV5DxX/wZbe3jwyLzTDJzyBHs2mAVvqqqjQfYO6O+3GfZyMIFK92Rh8MClIfbjll WE2km5Rx/75SyJ13rTG758Z6TzLWU3GGiNLGCtynyLLe865xbWg3kidX+2AuVvpC 5CXj7HSmHSAV0IZhYI3LPEfEczRkGTiyK1Vvn7NM2G+ocQQUKmGWLEAorrW3Ys9J dU/SngE1IVjHYU0t22ev71jkosvjCMu9HGuHQzGOaRSoBimE22zNIj7cy/tRoCqY NU8rluDBITDrUiv7fwjt03x9P5rJNqenhevfC/7BFkZWXdoKIF7Yj1J2ubkkvGFw +UYPMmromb0H9A+elpelwa6aloqUXUHnIbAhgRrieo9+AkyzYVInGhBneD3dvW8i Z2MC8cRTV6nVoA5Ke0uA =zvQ0 -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . The latest version of Red Hat Build of OptaPlanner 8.38.0 tackles significant security vulnerabilities.. OptaPlanner Security Update, Red Hat, Quarkus DoS Vulnerability. . Severity: Important. LinuxSecurity.com Team

Jul 18, 2023 •Important Red Hat