Red Hat Security Advisory

RHSA-2023:5491

Red Hat AMQ Broker 7.11.2 release and security update

Released 2023-10-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

AMQ Broker 7.11.2

Fixes 3 records

TI-2023-01561 CVE-2023-1664 · GHSA-5cc8-pgp5-7mpm

Improper certificate validation in Keycloak

LOW 35

A flaw was found in Keycloak.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00425 Published 2023-05-26 Partial fix · 21.1.2 CWE-295

TI-2023-16196 CVE-2023-33008 · GHSA-crqg-jrpj-fc84

Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale

LOW 33

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01442 Published 2023-07-07 Partial fix · 1.2.21 CWE-502

TI-2023-02788 CVE-2023-2976 · GHSA-7g45-4rm6-3mm3

Use of temporary directory for file creation in `FileBackedOutputStream` in Guava

LOW 33

Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00248 Published 2023-06-14 Partial fix · 32.0.0, 32.0.0-android CWE-552