Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker
Commits: e07f843a by Markus Koschany at 2023-11-20T21:50:55+01:00 Reserve DLA-3657-1 for activemq - - - - - 3 changed files: - data/CVE/list - data/DLA/list - data/dla-needed.txt Changes: ===================================== data/CVE/list ===================================== @@ -193223,7 +193223,6 @@ CVE-2021-26118 (While investigating ARTEMIS-2964 it was found that the creation CVE-2021-26117 (The optional ActiveMQ LDAP login module can be configured to use anony ...) {DLA-2583-1} - activemq 5.16.1-1 (bug #982590) - [buster] - activemq <no-dsa> (Minor issue) NOTE: https://issues.apache.org/jira/browse/AMQ-8035 NOTE: https://www.openwall.com/lists/oss-security/2021/01/27/6 NOTE: https://gitbox.apache.org/repos/asf?p=activemq.git;h=c9f68f4c64b2687eee283b95538753665d2b229b @@ -253458,7 +253457,6 @@ CVE-2020-13921 (**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking CVE-2020-13920 (Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX ...) {DLA-2400-1} - activemq 5.16.0-1 - [buster] - activemq <no-dsa> (Minor issue; can be fixed via point release) NOTE: http://activemq.apache.org/security-advisories.data/CVE-2020-13920-announcement.txt NOTE: When fixing this issue make sure to use a complete fix and not open up NOTE: CVE-2020-11998 (a regression introduced in 5.15.12 in the commit preventing ===================================== data/DLA/list ===================================== @@ -1,3 +1,6 @@ +[20 Nov 2023] DLA-3657-1 activemq - security update + {CVE-2020-13920 CVE-2021-26117 CVE-2023-46604} + [buster] - activemq 5.15.16-0+deb10u1 [19 Nov 2023] DLA-3656-1 netty - security update {CVE-2023-44487} [buster] - netty 1:4.1.33-1+deb10u4 ===================================== data/dla-needed.txt ===================================== @@ -20,9 +20,6 @@ https://wiki.debian.org/LTS/Development#Triage_new_security_issues To make it easier to see the entire history of an update, please append notes rather than remove/replace existing ones. --- -activemq (Markus Koschany) - NOTE: 20231119: Added by Front-Desk (apo) -- amanda (tobi) NOTE: 20230730: Added by Front-Desk (apo) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e07f843a9e7b32633480ecd9c86c043b422f5cfe -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e07f843a9e7b32633480ecd9c86c043b422f5cfe You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits