How to patch CVE-2022-1259 for WildFly 26.1.3?

[Chiyu]

Hi, I am trying to find a way to patch CVE-2022-1259 for WildFly 26.1.3, we can't upgrade to 28.0.1 Final that has the fix since we need to stay on Jakarta EE8, is there any way we can patch it ourself and how to I verify the patch.

Thanks.

[Jose Socola]

I think u can try to update undetown module to 2.2.33 version, we have 2.2.28 version in prd environments and works fine.

Regards,

JS

On Tue, Jul 2, 2024 at 1:11 PM Chiyu <chiyur...@gmail.com> wrote:

Hi, I am trying to find a way to patch CVE-2022-1259 for WildFly 26.1.3, we can't upgrade to 28.0.1 Final that has the fix since we need to stay on Jakarta EE8, is there any way we can patch it ourself and how to I verify the patch.

Thanks.

--
You received this message because you are subscribed to the Google Groups "WildFly" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wildfly+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wildfly/9bcd3c52-2e96-43a1-94a0-11de89146fa9n%40googlegroups.com.