Red Hat Security Advisory

RHSA-2023:3814

Migration Toolkit for Runtimes security update

Released 2023-06-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

TI-2023-09041 CVE-2023-22899 · GHSA-2pj2-gchf-wmw7

MEDIUM 60

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00642 Published 2023-01-10 Partial fix · 2.11.3 CWE-346

TI-2023-02621 CVE-2023-2798 · GHSA-rc44-5cmh-879m

LOW 35

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00907 Published 2023-05-25 Partial fix · 2.70.0 CWE-400