RHSA-2022:0222MediumCVSS 8.1
Red Hat Security Advisory: Red Hat Integration Camel Extensions for Quarkus 2.2 security update
🔗 CVE IDs covered (3)
📋 Description
CVE-2021-44832 — log4j-core: remote code execution via JDBC Appender CVE-2021-45046 — log4j-core: DoS in log4j 2.x with thread context message pattern and context lookup pattern (incomplete fix for CVE-2021-44228) CVE-2021-45105 — log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2022:0222
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=red.hat.integration&version=2022-Q1
- externalhttps://access.redhat.com/documentation/en-us/red_hat_integration/2022.q1
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2032580
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2034067
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2035951
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0222.json