Skip to content

Commit e86c5d3

Browse files
RamSubbaraoGitHub Enterprise
authored andcommitted
Update Changelog for 9.3.0.x with the security fixes (#601)
1 parent 1517cfd commit e86c5d3

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

CHANGELOG.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,16 @@
11
# Change log
22

3-
# 9.3.0.16-LTS (2024-02)
3+
## 9.3.0.16-LTS (2024-02)
44

55
* Updated to MQ version 9.3.0.16
66

7-
# 9.3.0.15-LTS (2024-01)
7+
### Security Fixes
8+
* golang.org/x/crypto library has been upgraded to remediate CVE-2023-48795 vulnerability.
9+
* More secure sha512 algorithm will be used instead of sha256 to create self signed Certificate in the Web keystore.
10+
* The MQ container generates a PKCS#12 key store for use with the MQ web server.This keystore is generated using a legacy SHA-1 encryption,container code has been updated to use Pkcs12.Modern.Encode function which uses SHA-2 encryption.
11+
* Vulnerability has been reported on PathTraversal method usages which now have been fixed.
12+
13+
## 9.3.0.15-LTS (2024-01)
814

915
* Updated to MQ version 9.3.0.15
1016

0 commit comments

Comments
 (0)