Lucene search

K
redhatRedHatRHSA-2022:9032
HistoryDec 15, 2022 - 12:38 p.m.

(RHSA-2022:9032) Important: Red Hat build of Eclipse Vert.x 4.3.4 security update

2022-12-1512:38:08
access.redhat.com
24

0.008 Low

EPSS

Percentile

81.7%

This release of Red Hat build of Eclipse Vert.x 4.3.4 GA includes security updates. For more information, see the release notes listed in the References section.

Security Fix(es):

  • snakeyaml: Constructor Deserialization Remote Code Execution (CVE-2022-1471)

  • jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS (CVE-2022-42003)

  • jackson-databind: use of deeply nested arrays (CVE-2022-42004)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section.