Red Hat Security Advisory

RHSA-2021:0871

Red Hat Integration Debezium 1.4.2 security update

Released 2021-03-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Integration Debezium 1.4.2

Fixes 1 record

TI-2021-03616 CVE-2021-20328 · GHSA-rghw-6px2-fgwc

MongoDB Java driver client-side field level encryption not verifying KMS host name

LOW 32

Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct host name verification on the KMS server’s certificate.

CVSS 3.1MEDIUM 6.8 Adjacent network No auth No interaction EPSS 0.00436 Published 2021-02-25 Partial fix · 3.11.3, 3.12.8 +3 CWE-295