Markus Koschany pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e07f843a by Markus Koschany at 2023-11-20T21:50:55+01:00
Reserve DLA-3657-1 for activemq
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -193223,7 +193223,6 @@ CVE-2021-26118 (While investigating ARTEMIS-2964 it
was found that the creation
CVE-2021-26117 (The optional ActiveMQ LDAP login module can be configured to
use anony ...)
{DLA-2583-1}
- activemq 5.16.1-1 (bug #982590)
- [buster] - activemq <no-dsa> (Minor issue)
NOTE: https://issues.apache.org/jira/browse/AMQ-8035
NOTE: https://www.openwall.com/lists/oss-security/2021/01/27/6
NOTE:
https://gitbox.apache.org/repos/asf?p=activemq.git;h=c9f68f4c64b2687eee283b95538753665d2b229b
@@ -253458,7 +253457,6 @@ CVE-2020-13921 (**Resolved** Only when using
H2/MySQL/TiDB as Apache SkyWalking
CVE-2020-13920 (Apache ActiveMQ uses LocateRegistry.createRegistry() to create
the JMX ...)
{DLA-2400-1}
- activemq 5.16.0-1
- [buster] - activemq <no-dsa> (Minor issue; can be fixed via point
release)
NOTE:
http://activemq.apache.org/security-advisories.data/CVE-2020-13920-announcement.txt
NOTE: When fixing this issue make sure to use a complete fix and not
open up
NOTE: CVE-2020-11998 (a regression introduced in 5.15.12 in the commit
preventing
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[20 Nov 2023] DLA-3657-1 activemq - security update
+ {CVE-2020-13920 CVE-2021-26117 CVE-2023-46604}
+ [buster] - activemq 5.15.16-0+deb10u1
[19 Nov 2023] DLA-3656-1 netty - security update
{CVE-2023-44487}
[buster] - netty 1:4.1.33-1+deb10u4
=====================================
data/dla-needed.txt
=====================================
@@ -20,9 +20,6 @@
https://wiki.debian.org/LTS/Development#Triage_new_security_issues
To make it easier to see the entire history of an update, please append notes
rather than remove/replace existing ones.
---
-activemq (Markus Koschany)
- NOTE: 20231119: Added by Front-Desk (apo)
--
amanda (tobi)
NOTE: 20230730: Added by Front-Desk (apo)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e07f843a9e7b32633480ecd9c86c043b422f5cfe
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e07f843a9e7b32633480ecd9c86c043b422f5cfe
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
