Red Hat Security Advisory

RHSA-2022:6820

prometheus-jmx-exporter security update

Released 2022-10-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) prometheus-jmx-exporter-0.12.0-8.el8_6, prometheus-jmx-exporter-openjdk11-0.12.0-8.el8_6, prometheus-jmx-exporter-openjdk17-0.12.0-8.el8_6 +1

Fixes 1 record

TI-2022-09423 CVE-2022-25857 · GHSA-3mc7-4q67-w48m

Denial of service (DoS) in org.yaml:snakeyaml

LOW 38

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02932 Published 2022-08-30 Partial fix · 1.31 CWE-776