Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-25943

Upgrade santuario to 3.0.3

    XMLWordPrintable

Details

    • False
    • None
    • False

    Description

      Upgrade santuario(xmlsec) from 3.0.2 to 3.0.3 . 

      Release notes : https://issues.apache.org/jira/projects/SANTUARIO/versions/12353074

      This upgrade includes the fix for  CVE-2023-44483: Apache Santuario: Private Key disclosure in debug-log output

      (https://nvd.nist.gov/vuln/detail/CVE-2023-44483)

       

      Attachments

        Issue Links

          clones

          Component Upgrade - A task tracking an update to a bundled component or revision of component upstream of the project. WFLY-18685 Upgrade santuario to 3.0.3 (addresses CVE-2023-44483)

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved
          is cloned by

          Component Upgrade - A task tracking an update to a bundled component or revision of component upstream of the project. JBEAP-25944 Upgrade santuario to 2.2.6 to include the CVE-2023-44483 fix

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              rhn-engineering-ema Jim Ma
              rhn-engineering-ema Jim Ma
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: