Important: Red Hat Security Advisory: Red Hat build of Quarkus 2.13.5 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Important: Red Hat Security Advisory: Red Hat build of Quarkus Platform 2.7.6.SP3 and security update

An update is now available for Red Hat build of Quarkus Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more...

CVE-2022-4147

creationtimestamp| type| source ---|---|--- 2022-12-06 22:40:59+00:00| seen| https://t.me/cibsecurity/54091...

com.hazelcast:quarkus-hazelcast-client-integration-tests (1.1.1), io.github.marcelorubim:quarkus-monitor (0.1.3) +81 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.8.3.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.hazelcast:quarkus-hazelcast-client-integration-tests 1.1.1 -...

io.quarkus:quarkus-amazon-lambda-http (1.7.3.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.7.3.final) +69 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.7.3.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.7.3.final -...

io.quarkiverse.apicurio:quarkiverse-apicurio-registry-client (0.0.1), io.quarkiverse.apicurio:quarkiverse-apicurio-registry-client-deployment (0.0.1) +370 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.10.3.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.10.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.apicurio:quarkiverse-apicurio-registry-client 0.0.1 -...

com.hazelcast:quarkus-hazelcast-client-integration-tests (1.1.0), com.pro-crafting.tools:jsonpretty-web (1.0.4) +82 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.8.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.8.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.hazelcast:quarkus-hazelcast-client-integration-tests 1.1.0 -...

io.quarkus:quarkus-amazon-lambda-http (1.3.1.final), io.quarkus:quarkus-amazon-lambda-http-deployment (1.3.1.final) +60 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.3.1.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.3.1.final -...

com.blazebit:blaze-persistence-examples-quarkus-base (>=1.5.0, <=1.6.0-alpha1), com.blazebit:blaze-persistence-examples-quarkus-testsuite-base (>=1.5.0, <=1.6.0-alpha1) +245 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.7.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.7.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base =1.5.0, =1.5.0, =1.5.0, =1.5.0, =1.5.0,...

io.quarkus:quarkus-amazon-lambda-http (1.6.0.cr1), io.quarkus:quarkus-amazon-lambda-http-deployment (1.6.0.cr1) +69 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.6.0.cr1)

io.quarkus:quarkus-vertx-http MAVEN version 1.6.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 1.6.0.cr1 - io.quarkus:quarkus-amazon-lambda-http-deploymen...

io.apicurio:apicurio-registry-common (1.3.2.final), io.quarkiverse.cxf:quarkus-cxf (0.1.0) +329 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.9.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.apicurio:apicurio-registry-common 1.3.2.final - io.quarkiverse.cxf:quarkus-cxf 0.1.0 -...

io.apicurio:apicurio-registry-app (1.0.2.final), io.apicurio:apicurio-registry-storage-infinispan (1.0.2.final) +83 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (0.26.1)

io.quarkus:quarkus-vertx-http MAVEN version 0.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.apicurio:apicurio-registry-app 1.0.2.final - io.apicurio:apicurio-registry-storage-infinispan...

com.github.quarkus-extension:dynamic-config (>=0.0.1, <=0.0.3), com.hazelcast:quarkus-hazelcast-client-integration-tests (1.0.0-rc2) +181 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.3.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.github.quarkus-extension:dynamic-config =0.0.1, =0.0.3 -...

com.blazebit:blaze-persistence-examples-quarkus-base (>=1.5.0-alpha4, <=1.5.0-alpha5), com.blazebit:blaze-persistence-examples-quarkus-testsuite-base (>=1.5.0-alpha4, <=1.5.0-alpha5) +249 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.5.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.blazebit:blaze-persistence-examples-quarkus-base =1.5.0-alpha4, =1.5.0-alpha4, =1.5.0-alpha...

io.quarkus:quarkus-amazon-lambda-http (0.27.0), io.quarkus:quarkus-amazon-lambda-http-deployment (0.27.0) +98 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (0.27.0)

io.quarkus:quarkus-vertx-http MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 0.27.0 - io.quarkus:quarkus-amazon-lambda-http-deployment 0.27...

io.quarkus:quarkus-azure-functions-http (0.26.0), io.quarkus:quarkus-azure-functions-http-deployment (0.26.0) +44 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (0.26.0)

io.quarkus:quarkus-vertx-http MAVEN version 0.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-azure-functions-http 0.26.0 - io.quarkus:quarkus-azure-functions-http-deployment...

com.github.database-rider:quarkus-postgres-sample (>=1.24.0, <=1.37.1), com.github.fmcejudo:quarkus-eureka (0.0.11) +234 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.13.3.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.13.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - com.github.database-rider:quarkus-postgres-sample =1.24.0, =1.37.1 -...

io.quarkiverse.micrometer.registry:quarkiverse-micrometer-registry-azure-monitor (0.1.0), io.quarkiverse.micrometer.registry:quarkiverse-micrometer-registry-azure-monitor-deployment (0.1.0) +94 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.11.0.beta1)

io.quarkus:quarkus-vertx-http MAVEN version 1.11.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.micrometer.registry:quarkiverse-micrometer-registry-azure-monitor 0.1.0 -...

io.quarkus:quarkus-amazon-lambda-http (0.28.1), io.quarkus:quarkus-amazon-lambda-http-deployment (0.28.1) +47 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (0.28.1)

io.quarkus:quarkus-vertx-http MAVEN version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-amazon-lambda-http 0.28.1 - io.quarkus:quarkus-amazon-lambda-http-deployment 0.28...

io.quarkiverse.cxf:quarkus-cxf (0.1.1), io.quarkiverse.cxf:quarkus-cxf-deployment (0.1.1) +390 more potentially affected by CVE-2022-4147 via io.quarkus:quarkus-vertx-http (1.10.0.final)

io.quarkus:quarkus-vertx-http MAVEN version 1.10.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkiverse.cxf:quarkus-cxf 0.1.1 - io.quarkiverse.cxf:quarkus-cxf-deployment 0.1.1 -...