(RHSA-2024:2705) Moderate: Red Hat build of Quarkus 3.2.12 release and security update

2024-05-0911:54:42

access.redhat.com

red hat

quarkus 3.2.12

security update

cve-2024-2700

cve-2024-29025

bug fixes

enhancements

io.netty

io.quarkus

unix

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

JSON

This release of Red Hat build of Quarkus 3.2.12 includes security updates,
bug fixes, and enhancements. For more information, see the release notes page
listed in the References section.

Security Fix(es):

CVE-2024-2700 io.quarkus/quarkus-core: Leak of local configuration properties into Quarkus applications [quarkus-3.2]
CVE-2024-29025 io.netty/netty-codec-http: Allocation of Resources Without Limits or Throttling [quarkus-3.2]