RHSA-2023:2041HighCVSS 9.8

Red Hat Security Advisory: Migration Toolkit for Applications security and bug fix update

Published
April 27, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (4)

CVE-2022-31690 →CVE-2022-41966 →CVE-2022-46364 →CVE-2022-3782 →

📋 Description

CVE-2022-3782 — keycloak: path traversal via double URL encoding CVE-2022-31690 — spring-security-oauth2-client: Privilege Escalation in spring-security-oauth2-client CVE-2022-41966 — xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow CVE-2022-46364 — CXF: SSRF Vulnerability

🎯 Affected products7

  • MTA 6.1 for RHEL 8
  • mta/mta-hub-rhel8@sha256:c99e9df8b290935990e627a1ebe56da81dde49573aabb5a3c9133589f8f5b166_amd64 as a component of MTA 6.1 for RHEL 8
  • mta/mta-operator-bundle@sha256:eb99432ed3e453011e00bff4f6bc71b4347842e652335cc14d03ea4c96214c35_amd64 as a component of MTA 6.1 for RHEL 8
  • mta/mta-pathfinder-rhel8@sha256:8e2f586345d6b7e1c2e6d31b8e24965c38aa1640cbec0fb564deb2b2792c2c46_amd64 as a component of MTA 6.1 for RHEL 8
  • mta/mta-rhel8-operator@sha256:aa8087d3d9fa8123d2f925d6ddb3f7e3bde2c72ab02946cbe4d779f3450a8e09_amd64 as a component of MTA 6.1 for RHEL 8
  • mta/mta-ui-rhel8@sha256:24a3853bfc2cb9d37aa0a58e9c20224b3f9af91b8f55fbb0fe307294ad522685_amd64 as a component of MTA 6.1 for RHEL 8
  • mta/mta-windup-addon-rhel8@sha256:4268ab203ca9fd8ae3919dc80dbf31d2ce8591f2df55d6e5f4a12ead716a0cc0_amd64 as a component of MTA 6.1 for RHEL 8

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (69)