Red Hat Security AdvisoryRHSA-2020:2618
Red Hat AMQ Streams 1.5.0 release and security update
Released 2020-06-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat AMQ Streams 1.5.0
Fixes 2 records
Priority MEDIUM 45
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.09188 · Published 2020-04-07 · Partial fix · 4.1.46 CWE-770
Priority LOW 32
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information.
CVSS 3.1MEDIUM 6.3· Local · Low privileges · No interaction · EPSS 0.01769 · Published 2020-05-14 · Partial fix · 1.9.15, 1.10.8 CWE-668
