What is RHSA-2021:1004?

RHSA-2021:1004 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: Red Hat build of Quarkus 1.11.6 release and security update

Which CVE IDs does RHSA-2021:1004 cover?

RHSA-2021:1004 covers the following CVE IDs: CVE-2020-25633, CVE-2020-25724, CVE-2020-26238, CVE-2021-20218. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2021:1004?

RHSA-2021:1004 has a CVSS v3 base score of 8.1, published by Red Hat Product Security.

Which products are affected by RHSA-2021:1004?

RHSA-2021:1004 affects 1 product, including: Text-Only RHOAR.

RHSA-2021:1004MediumCVSS 8.1

Red Hat Security Advisory: Red Hat build of Quarkus 1.11.6 release and security update

Vendor

Red Hat Product Security

Published

March 29, 2021

Last Modified

August 4, 2026

🔗 CVE IDs covered (4)

CVE-2020-25633 →CVE-2020-25724 →CVE-2020-26238 →CVE-2021-20218 →

📋 Description

CVE-2020-25633 — resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling CVE-2020-25724 — resteasy: information disclosure via HTTP response reuse CVE-2020-26238 — cron-utils: template injection allows attackers to inject arbitrary Java EL expressions leading to remote code execution CVE-2021-20218 — fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise

🎯 Affected products1

Text-Only RHOAR

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link for the update. You must be logged in to download the update.

🔗 CVE IDs covered (4)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (10)