Red Hat JBoss A-MQ: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 8.8
  CVE-2023-4759

  Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write

  Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cl…

  Eclipse Foundation Eclipse JGit org.eclipse.jgit:org.eclipse.jgit jgit Debian Ubuntu Maven
  Sep 12, 2023
• Medium 6.5
  CVE-2023-44483

  Apache Santuario: Private Key disclosure in debug-log output

  All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level i…

  Apache Software Foundation Apache Santuario sonarqube-10 org.apache.santuario:xmlsec Debian Ubuntu Wolfi Maven
  Oct 20, 2023

Revision history

1. 2024-06-06 #4

   Neue Updates von Red Hat aufgenommen

2. 2024-03-06 #3

   Neue Updates von Red Hat aufgenommen

3. 2024-02-13 #2

   Neue Updates von Red Hat aufgenommen

4. 2024-02-06 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2024:0804 vom 2024-02-13
  https://access.redhat.com/errata/RHSA-2024:0804
• Red Hat Security Advisory RHSA-2024:0799 vom 2024-02-14
  https://access.redhat.com/errata/RHSA-2024:0799
• Red Hat Security Advisory RHSA-2024:1192 vom 2024-03-06
  https://access.redhat.com/errata/RHSA-2024:1192
• Red Hat Security Advisory RHSA-2024:1194 vom 2024-03-06
  https://access.redhat.com/errata/RHSA-2024:1194
• Red Hat Security Advisory RHSA-2024:1193 vom 2024-03-06
  https://access.redhat.com/errata/RHSA-2024:1193
• RedHat Security Advisory vom 2024-02-06
  https://access.redhat.com/errata/RHSA-2024:0710
• RedHat Security Advisory vom 2024-02-06
  https://access.redhat.com/errata/RHSA-2024:0711
• RedHat Security Advisory vom 2024-02-06
  https://access.redhat.com/errata/RHSA-2024:0712
• RedHat Security Advisory vom 2024-02-06
  https://access.redhat.com/errata/RHSA-2024:0714
• Red Hat Security Advisory RHSA-2024:3708 vom 2024-06-06
  https://access.redhat.com/errata/RHSA-2024:3708