RHSA-2022:0290: Important: parfait:0.5 security update

Published Jan 26, 2022
·
Updated

Parfait is a Java performance monitoring library that collects metrics and exposes them through a variety of outputs. It provides APIs for extracting performance metrics from the JVM and other sources. It interfaces to Performance Co-Pilot (PCP) using the Memory Mapped Value (MMV) machinery for extremely lightweight instrumentation.Security Fix(es): log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender (CVE-2022-23305) log4j: Unsafe deserialization flaw in Chainsaw log viewer (CVE-2022-23307) log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender (CVE-2021-4104) log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink (CVE-2022-23302) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

22 affected componentsFixes available
redhat/parfait<0.5.4-4.module+el8.5.0+13988+de2b8c0b
0.5.4-4.module+el8.5.0+13988+de2b8c0b
redhat/si-units<0.6.5-2.module+el8+2463+615f6896
0.6.5-2.module+el8+2463+615f6896
redhat/unit-api<1.0-5.module+el8+2463+615f6896
1.0-5.module+el8+2463+615f6896
redhat/uom-lib<1.0.1-6.module+el8+2463+615f6896
1.0.1-6.module+el8+2463+615f6896
redhat/uom-parent<1.0.3-3.module+el8+2463+615f6896
1.0.3-3.module+el8+2463+615f6896
redhat/uom-se<1.0.4-3.module+el8+2463+615f6896
1.0.4-3.module+el8+2463+615f6896
redhat/uom-systems<0.7-1.module+el8+2463+615f6896
0.7-1.module+el8+2463+615f6896
redhat/parfait<0.5.4-4.module+el8.5.0+13988+de2b8c0b
0.5.4-4.module+el8.5.0+13988+de2b8c0b
redhat/parfait-examples<0.5.4-4.module+el8.5.0+13988+de2b8c0b
0.5.4-4.module+el8.5.0+13988+de2b8c0b
redhat/parfait-javadoc<0.5.4-4.module+el8.5.0+13988+de2b8c0b
0.5.4-4.module+el8.5.0+13988+de2b8c0b
redhat/pcp-parfait-agent<0.5.4-4.module+el8.5.0+13988+de2b8c0b
0.5.4-4.module+el8.5.0+13988+de2b8c0b
redhat/si-units<0.6.5-2.module+el8+2463+615f6896
0.6.5-2.module+el8+2463+615f6896
redhat/si-units-javadoc<0.6.5-2.module+el8+2463+615f6896
0.6.5-2.module+el8+2463+615f6896
redhat/unit-api<1.0-5.module+el8+2463+615f6896
1.0-5.module+el8+2463+615f6896
redhat/unit-api-javadoc<1.0-5.module+el8+2463+615f6896
1.0-5.module+el8+2463+615f6896
redhat/uom-lib<1.0.1-6.module+el8+2463+615f6896
1.0.1-6.module+el8+2463+615f6896
redhat/uom-lib-javadoc<1.0.1-6.module+el8+2463+615f6896
1.0.1-6.module+el8+2463+615f6896
redhat/uom-parent<1.0.3-3.module+el8+2463+615f6896
1.0.3-3.module+el8+2463+615f6896
redhat/uom-se<1.0.4-3.module+el8+2463+615f6896
1.0.4-3.module+el8+2463+615f6896
redhat/uom-se-javadoc<1.0.4-3.module+el8+2463+615f6896
1.0.4-3.module+el8+2463+615f6896
redhat/uom-systems<0.7-1.module+el8+2463+615f6896
0.7-1.module+el8+2463+615f6896
redhat/uom-systems-javadoc<0.7-1.module+el8+2463+615f6896
0.7-1.module+el8+2463+615f6896

Remediation

Event History

Jun 3, 2026
Advisory Published
via Red Hat·07:52 PM
Data Sourced
via Red Hat·07:52 PM
RemedyDescriptionAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of RHSA-2022:0290?

The severity of RHSA-2022:0290 is classified as moderate.

2

How do I fix RHSA-2022:0290?

To fix RHSA-2022:0290, upgrade to the specified remedial versions of the affected packages listed in the advisory.

3

What software is affected by RHSA-2022:0290?

RHSA-2022:0290 affects several packages including parfait, si-units, unit-api, uom-lib, uom-parent, and others.

4

What does RHSA-2022:0290 address?

RHSA-2022:0290 addresses vulnerabilities in the Java performance monitoring library Parfait and its related components.

5

Is there a public reference for RHSA-2022:0290?

Yes, RHSA-2022:0290 has a public advisory available from Red Hat.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203