Skip to content

Commit f28c1eb

Browse files
RamSubbaraoGitHub Enterprise
authored andcommitted
Update changelog with Security fixes for v9.3.3.3 (#602)
1 parent 5a9719b commit f28c1eb

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

CHANGELOG.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,15 @@
11
# Change log
22

3+
## 9.3.3.3-r2 (2024-02)
4+
5+
* Updated to MQ version 9.3.3.3-r2
6+
7+
### Security Fixes
8+
* golang.org/x/crypto library has been upgraded to remediate CVE-2023-48795 vulnerability.
9+
* More secure sha512 algorithm will be used instead of sha256 to create self signed Certificate in the Web keystore.
10+
* The MQ container generates a PKCS#12 key store for use with the MQ web server.This keystore is generated using a legacy SHA-1 encryption,container code has been updated to use Pkcs12.Modern.Encode function which uses SHA-2 encryption.
11+
* Vulnerability has been reported on PathTraversal method usages which now have been fixed.
12+
313
## 9.3.3.3-r1 (2024-01)
414

515
* Updated to MQ version 9.3.3.3-r1

0 commit comments

Comments
 (0)