RHSA-2023:3373MediumCVSS 7.5

Red Hat Security Advisory: Migration Toolkit for Runtimes security update

Published
May 31, 2023
Last Modified
August 6, 2026

🔗 CVE IDs covered (3)

CVE-2021-46877 →CVE-2022-41854 →CVE-2022-41881 →

📋 Description

CVE-2021-46877 — jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode CVE-2022-41854 — dev-java/snakeyaml: DoS via stack overflow CVE-2022-41881 — codec-haproxy: HAProxyMessageDecoder Stack Exhaustion DoS

🎯 Affected products16

  • Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-operator-bundle@sha256:90794f222e3d06e5312a808475d784b9c19c5830f3095c26d1d486a2c4c65744_amd64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-operator-bundle@sha256:90e1ab28e5bab215a770dd25e4091eacb9db3851801e54a15bf9bea9257ae117_ppc64le as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-operator-bundle@sha256:c6f3757a10c0f4679b414392713da6cb36760c29c375bf615cd9e1ee23f68062_s390x as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-operator-bundle@sha256:f6b4463befecf9a8b5741cca535214f49842f45333704f6003853f7c403c3326_arm64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-rhel8-operator@sha256:45392a5ea3e1a610edf2f0ee60a721370f763e5712aefa4d1a79001f9f6f071e_s390x as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-rhel8-operator@sha256:a7aeac410307931305125078e51c4086df0aba23215d2a2fd25ac003abe492dc_ppc64le as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-rhel8-operator@sha256:c221730b6caf70982ac608448c481fd46fd5e23618ccd409a898850df3a28fe3_arm64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-rhel8-operator@sha256:f8ab58df5b777845c0e34328ae06ee73189573b040b018dbbac9c67da4c8077e_amd64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-web-container-rhel8@sha256:01aff83b56ddcb52aa891defe2e9a68c41ef33f463fd8922c16dc0a18fcb26f3_s390x as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-web-container-rhel8@sha256:1e12bba9f5a4f819b03ad735ed7d9bef6e6fdd31cf1a7e226af202244816add3_amd64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-web-container-rhel8@sha256:34c77234543e286178504bbacbf543782b370adffa77e1878fcb3dd85531bacc_ppc64le as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-web-executor-container-rhel8@sha256:16cb9c5fde455960cf4f372d249c53794028953f2deef00b1b09b18c72527f5a_s390x as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-web-executor-container-rhel8@sha256:aa6dccfa566506e417ffcf16288344f8c5c7f538fd92c1d53500ab47821eada7_amd64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-web-executor-container-rhel8@sha256:bf6395e9f0695a261342c56b5ec33e26f841a5823cec4fb88d1fae55e983e80e_arm64 as a component of Migration Toolkit for Runtimes 1 on RHEL 8
  • mtr/mtr-web-executor-container-rhel8@sha256:e0c34669ad4072eb8ddfb89ba88f514e315565e4d76ef8f8725326d4bc3b38dd_ppc64le as a component of Migration Toolkit for Runtimes 1 on RHEL 8

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (6)