(RHSA-2020:2561) Critical: EAP Continuous Delivery Technical Preview Release 12 security update

Red Hat JBoss Enterprise Application Platform CD12 is a platform for Java applications based on the WildFly application runtime.

This release of Red Hat JBoss Enterprise Application Platform CD12 includes bug fixes and enhancements.

Security Fix(es):

• artemis: artemis/hornetq: memory exhaustion via UDP and JGroups discovery (CVE-2017-12174)
• lucene: Solr: Code execution via entity expansion (CVE-2017-12629)
• infinispan-core: infinispan: Unsafe deserialization of malicious object injected into data cache (CVE-2017-15089)
• slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088)
• elytron: client can use bogus uri in digest authentication (CVE-2017-12196)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.