Issued:
2023-10-04
Updated:
2023-10-04

RHSA-2023:5446 - Important: Red Hat Build of OptaPlanner 8.38.0 SP1

Synopsis

Important: Red Hat Build of OptaPlanner 8.38.0 SP1

Type/Severity

Security Advisory Important

Topic

Red Hat build of OptaPlanner 8.38.0 for Quarkus 2.13.8 release and security update is now available. The purpose of this text-only errata is to inform you about the security issues fixed.

Red Hat Product Security has rated this update as having an impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.

Description

Release of Red Hat build of OptaPlanner 8.38.0 SP1

This release includes security fixes.

Security Fix(es):

  • org.kie.kogito-kogito-apps: quarkus: HTTP security policy bypass (CVE-2023-4853)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

ProductVersionArch
Red Hat JBoss Middleware1x86_64

Fixes

CVEs

References

Additional information