Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-25944

Upgrade santuario to 2.2.6 to include the CVE-2023-44483 fix

    XMLWordPrintable

Details

    Description

      Upgrade santuario(xmlsec) from 2.2.3 to 2.2.6 . 

      Release notes : https://issues.apache.org/jira/projects/SANTUARIO/versions/12353074

      This upgrade includes the fix for  CVE-2023-44483: Apache Santuario: Private Key disclosure in debug-log output

      (https://nvd.nist.gov/vuln/detail/CVE-2023-44483)

       

      Tag: https://github.com/apache/santuario-xml-security-java/releases/tag/xmlsec-2.2.6
      Dif: https://github.com/apache/santuario-xml-security-java/compare/xmlsec-2.2.3...xmlsec-2.2.6
      Hash: a6fdd4a275fdf6b50fb5c0a8edef5be7c6e7347c

      Attachments

        Issue Links

          clones

          Component Upgrade - A task tracking an update to a bundled component or revision of component upstream of the project. JBEAP-25943 Upgrade santuario to 3.0.3

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          links to

          Web Link RHSA-2023:120424 Red Hat JBoss Enterprise Application Platform 7.4.15 Security update

          Web Link RHSA-2023:120425 Red Hat JBoss Enterprise Application Platform 7.4.15 Security update

          Web Link RHSA-2023:120426 Red Hat JBoss Enterprise Application Platform 7.4.15Security update

          Web Link RHSA-2023:120429 Red Hat JBoss Enterprise Application Platform 7.4.15 Security update

          Activity

            People

              rhn-engineering-ema Jim Ma
              rhn-engineering-ema Jim Ma
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: