BASE-1910: Cumulative Security Patch for eptos Release 6.2.x - 2023-11

Summary	2023-11 Regular Security Update
Advisory Release Date
Products	eptos (All Components)
Affected Releases	eptos 6.2.*
Fixed Releases	Regular Cummulative Update 11-2023
CVE ID	CVE-2018-10237, CVE-2018-11798, CVE-2018-1320, CVE-2019-0205, CVE-2019-0210, CVE-2019-16869, CVE-2019-17571, CVE-2019-20444, CVE-2019-20445 CVE-2020-13949, CVE-2020-8908, CVE-2020-9488, CVE-2020-9493 CVE-2021-21290, CVE-2021-21295, CVE-2021-21409, CVE-2021-37136, CVE-2021-37137 CVE-2022-1586, CVE-2022-1587, CVE-2022-23302. CVE-2022-23305, CVE-2022-23307. CVE-2022-24823, CVE-2022-37434 , CVE-2022-48174, CVE-2023-38545, CVE-2023-25330 GHSA-2qrg-x229-3v8q GHSA-5mg8-w23w-74h3 GHSA-65fg-84f6-3jq3 GHSA-f7vh-qwp3-x37m GHSA-fp5r-v3w9-4333 GHSA-g2fg-mr77-6vrm GHSA-mvr2-9pj6-7w5j GHSA-rj7p-rfgp-852x GHSA-vx85-mj8c-4qm6 GHSA-w9p3-5cr8-m3jj GHSA-wjxj-f8rg-99wx
Issue ID	BASE-1910
Further information	CVE-2016-3088 is reported false positive , see BASE-1045: Critical CVE-2016-3088 activemq-protobuf 1.1 - False Positive

Summary

This cumulative patch release contains:

eptos products utilizes a third-party base technolgoy Alpine linux which is continuously updated. The patch release contains the newest Release of the alpine linux based on the most recent (Oct 2023).
Pinpoint client is updated to Release 2.x of pinpoint (see BASE-1551, BASE-1468, BASE-1469 )
Vulnerability Bug CVE-2022-1586 see BASE-1501
Log4j vulnerability in pentaho third party library BASE-1003

The rebuilt images may be found in your customer image repository.

Update the images in your kubernetes.

N/A

If you have questions or concerns regarding this advisory, check back with support (at) paradine,at and add BASE-1910 to your issue description.