(RHSA-2022:0469) Important: Red Hat AMQ Streams 2.0.1 release and security update

Red Hat AMQ Streams, based on the Apache Kafka project, offers a distributed backbone that allows microservices and other applications to share data with extremely high throughput and extremely low latency.

This release of Red Hat AMQ Streams 2.0.1 serves as a replacement for Red Hat AMQ Streams 2.0.0, and includes security and bug fixes, and enhancements.

Security Fix(es):

• log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender (CVE-2022-23305)

• log4j: Unsafe deserialization flaw in Chainsaw log viewer (CVE-2022-23307)

• kubernetes-client: Insecure deserialization in unmarshalYaml method (CVE-2021-4178)

• log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink (CVE-2022-23302)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.