Wowza Streaming Engine and CVE-2022-42889

The Wowza Streaming Engine release notes show that the Apache Commons Text component was updated to version 1.10.0 in the 4.8.21 release, which was made available on February 1, 2023

Impact Assessment

After extensive investigation, we have determined that CVE-2022-42889 does not impact Wowza Streaming Engine. The CVE is currently undergoing reanalysis, and we are closely monitoring any updates. (As of November 14, 2022, via the Wowza Streaming Engine Product Owner)

Ongoing Monitoring

We will continue to review the CVE as updates are posted. Our commitment is to ensure the security and reliability of Wowza Streaming Engine for all users.

Additional Resources