Skip to content

Commit 1058aff

Browse files
RamSubbaraoGitHub Enterprise
authored andcommitted
Update Changelog in mq-container private-master (#599)
1 parent b97044a commit 1058aff

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

CHANGELOG.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,13 @@
33
## 9.3.5.0 (2024-02)
44

55
* Updated to MQ version 9.3.5.0
6+
7+
### Security Fixes
68
* Fixed a security issue, where unencrypted credentials in mqwebuser.xml would be copied to /var/mqm. A symbolic link is now used instead.
9+
* golang.org/x/crypto library has been upgraded to remediate CVE-2023-48795 vulnerability.
10+
* More secure sha512 algorithm will be used instead of sha256 to create self signed Certificate in the Web keystore.
11+
* The MQ container generates a PKCS#12 key store for use with the MQ web server.This keystore is generated using a legacy SHA-1 encryption,container code has been updated to use Pkcs12.Modern.Encode function which uses SHA-2 encryption.
12+
* Vulnerability has been reported on PathTraversal method usages which now have been fixed.
713

814
## 9.3.4.0 (2023-12)
915

0 commit comments

Comments
 (0)