Red Hat Security Advisory: opendaylight security and bug fix update

Fixed packages 1

Vulnerabilities 1

• Medium 5.9
  CVE-2018-10237

  Denial of Service in Google Guava

  Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (w…

  druid guava-libraries com.google.guava:guava guava-libraries Debian Ubuntu Wolfi Maven
  Apr 26, 2018

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1573391
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1585227
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1597236
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1597304
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1598399
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1600608
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1602187
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1602188
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1602404
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1607965
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1609383
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1612057
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2598.json
• report
  https://access.redhat.com/security/cve/CVE-2018-10237
• advisory
  https://www.cve.org/CVERecord?id=CVE-2018-10237
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2018-10237
• article
  https://github.com/google/guava/wiki/CVE-2018-10237
• article
  https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion