[Git][security-tracker-team/security-tracker][master] Reserve DLA-3657-1 for activemq

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e07f843a by Markus Koschany at 2023-11-20T21:50:55+01:00
Reserve DLA-3657-1 for activemq

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -193223,7 +193223,6 @@ CVE-2021-26118 (While investigating ARTEMIS-2964 it was found that the creation
 CVE-2021-26117 (The optional ActiveMQ LDAP login module can be configured to use anony ...)
 	{DLA-2583-1}
 	- activemq 5.16.1-1 (bug #982590)
-	[buster] - activemq <no-dsa> (Minor issue)
 	NOTE: https://issues.apache.org/jira/browse/AMQ-8035
 	NOTE: https://www.openwall.com/lists/oss-security/2021/01/27/6
 	NOTE: https://gitbox.apache.org/repos/asf?p=activemq.git;h=c9f68f4c64b2687eee283b95538753665d2b229b
@@ -253458,7 +253457,6 @@ CVE-2020-13921 (**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking
 CVE-2020-13920 (Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX ...)
 	{DLA-2400-1}
 	- activemq 5.16.0-1
-	[buster] - activemq <no-dsa> (Minor issue; can be fixed via point release)
 	NOTE: http://activemq.apache.org/security-advisories.data/CVE-2020-13920-announcement.txt
 	NOTE: When fixing this issue make sure to use a complete fix and not open up
 	NOTE: CVE-2020-11998 (a regression introduced in 5.15.12 in the commit preventing


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[20 Nov 2023] DLA-3657-1 activemq - security update
+	{CVE-2020-13920 CVE-2021-26117 CVE-2023-46604}
+	[buster] - activemq 5.15.16-0+deb10u1
 [19 Nov 2023] DLA-3656-1 netty - security update
 	{CVE-2023-44487}
 	[buster] - netty 1:4.1.33-1+deb10u4


=====================================
data/dla-needed.txt
=====================================
@@ -20,9 +20,6 @@ https://wiki.debian.org/LTS/Development#Triage_new_security_issues
 To make it easier to see the entire history of an update, please append notes
 rather than remove/replace existing ones.
 
---
-activemq (Markus Koschany)
-  NOTE: 20231119: Added by Front-Desk (apo)
 --
 amanda (tobi)
   NOTE: 20230730: Added by Front-Desk (apo)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e07f843a9e7b32633480ecd9c86c043b422f5cfe

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e07f843a9e7b32633480ecd9c86c043b422f5cfe
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231120/e5765739/attachment.htm>