RHSA-2020:2561: Critical: EAP Continuous Delivery Technical Preview Release 12 security update

Red Hat JBoss Enterprise Application Platform CD12 is a platform for Java applications based on the WildFly application runtime.This release of Red Hat JBoss Enterprise Application Platform CD12 includes bug fixes and enhancements. Security Fix(es): artemis: artemis/hornetq: memory exhaustion via UDP and JGroups discovery (CVE-2017-12174) lucene: Solr: Code execution via entity expansion (CVE-2017-12629) infinispan-core: infinispan: Unsafe deserialization of malicious object injected into data cache (CVE-2017-15089) slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution (CVE-2018-8088) elytron: client can use bogus uri in digest authentication (CVE-2017-12196) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.