Red Hat Security Advisory: Red Hat Data Grid 7.3.3 security update

CVE-2018-14335 — h2: Information Exposure due to insecure handling of permissions in the backup CVE-2019-3805 — wildfly: Race condition on PID file allows for termination of arbitrary processes by local users CVE-2019-3888 — undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed CVE-2019-9512 — HTTP/2: flood using PING frames results in unbounded memory growth CVE-2019-9514 — HTTP/2: flood using HEADERS frames results in unbounded memory growth CVE-2019-9515 — HTTP/2: flood using SETTINGS frames results in unbounded memory growth CVE-2019-9518 — HTTP/2: flood using empty frames results in excessive resource consumption CVE-2019-10173 — xstream: remote code execution due to insecure XML deserialization (regression of CVE-2013-7285) CVE-2019-10174 — infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods CVE-2019-10184 — undertow: Information leak in requests for directories without trailing slashes CVE-2019-10212 — undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files CVE-2019-14379 — jackson-databind: default typing mishandling leading to remote code execution