Red Hat Security Advisory: Red Hat AMQ Streams 2.6.0 release and security update
🔗 CVE IDs covered (11)
📋 Description
CVE-2022-46751 — apache-ivy: XML External Entity vulnerability CVE-2023-2976 — guava: insecure temporary directory creation CVE-2023-5072 — JSON-java: parser confusion leads to OOM CVE-2023-20873 — spring-boot: Security Bypass With Wildcard Pattern Matching on Cloud Foundry CVE-2023-31582 — jose4j: Insecure iteration count setting CVE-2023-33201 — bouncycastle: potential blind LDAP injection attack using a self-signed certificate CVE-2023-40167 — jetty: Improper validation of HTTP/1 content-length CVE-2023-41080 — tomcat: Open Redirect vulnerability in FORM authentication CVE-2023-42445 — gradle: Possible local text file exfiltration by XML External entity injection CVE-2023-44387 — gradle: Incorrect permission assignment for symlinked files used in copy or archiving operations CVE-2023-44981 — zookeeper: Authorization Bypass in Apache ZooKeeper
🔗 References (15)
- selfhttps://access.redhat.com/errata/RHSA-2023:7678
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=jboss.amq.streams&version=2.6.0
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2215229
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2215465
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2231491
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2233112
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2235370
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2239634
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2242485
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2242538
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2243436
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2246370
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2246417
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7678.json