ROOT-APP-MAVEN-CVE-2021-0341 CVE-2021-0341 in com.squareup.okhttp3:okhttp - Patched by Root

Root has patched CVE-2021-0341 in the com.squareup.okhttp3:okhttp package for Root:Maven. Multiple fixed versions available...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to domain certificate spoofing due to the OkHostnameVerifier.java package ( CVE-2021-0341)

Summary OkHostnameVerifier.java is used by DataStage on Cloud Pak for Data as part of hostname verification. Vulnerability Details CVEID:CVE-2021-0341 DESCRIPTION: In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly...

Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities found in Java

Summary There are multiple vulnerabilities in Java used by IBM Cloud Transformation Advisor CVE-2021-46877, CVE-2021-0341, CVE-2021-35515, CVE-2021-35516, CVE-2024-30172. Vulnerability Details CVEID:CVE-2021-46877 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial of service, cause...

Important: Red Hat Security Advisory: Red Hat AMQ Streams 2.4.0 release and security update

Red Hat AMQ Streams 2.4.0 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Moderate: Red Hat Security Advisory: Red Hat Data Grid 8.4.2 security update

An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.3 security update on RHEL 9

New Red Hat Single Sign-On 7.6.3 packages are now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: Red Hat Single Sign-On 7.6.3 security update on RHEL 7

New Red Hat Single Sign-On 7.6.3 packages are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 XP 4.0.0.GA Security release

JBoss EAP XP 4.0.0.GA Security release on the EAP 7.4.9 base. See references for release notes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

com.apollographql.apollo3:apollo-android-support (>=3.0.0-dev2, <=3.0.0-dev12), com.apollographql.apollo3:apollo-cache-interceptor-jvm (>=3.0.0-dev2, <=3.0.0-dev13) +132 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.11)

com.squareup.okhttp3:okhttp MAVEN version 3.12.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.apollographql.apollo3:apollo-android-support =3.0.0-dev2, =3.0.0-dev2, =3.0.0-dev2, =3.0.0-alpha01,...

cn.hyperchain:litesdk (>=0.0.1, <=1.4.3), cn.ipokerface:minio-spring (>=2.7.0, <=2.8.1) +417 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.13.1)

com.squareup.okhttp3:okhttp MAVEN version 3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - cn.hyperchain:litesdk =0.0.1, =2.7.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0, =1.6.0,...

ai.nextbillion:nb-maps-client (>=0.6.0a, <=1.7.1), au.org.consumerdatastandards:client (>=1.0.0-rc6, <=2.4.1) +859 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.4)

com.squareup.okhttp3:okhttp MAVEN version 3.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.nextbillion:nb-maps-client =0.6.0a, =1.0.0-rc6, =1.0.0-rc6, =1.2.0, =1.0.2, =1.0.0, =1.0.0, =5.7.1,...

cn.hydrz:dipper-map (>=1.0.0, <=1.0.1), cn.xphsc.boot:kubernetes-spring-boot-starer (1.0.0-rc) +170 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.3)

com.squareup.okhttp3:okhttp MAVEN version 3.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - cn.hydrz:dipper-map =1.0.0, =2.7.1.5, =2.0.0-beta2, =0.0.1, =1.0.0, =2.3.0-beta, =2.0.0, =2.0.0, =2.1.0,...

club.pizzalord:galadriel (>=0.0.1, <=0.0.9), club.pizzalord:galadriel-authority (>=0.0.1, <=0.0.9) +334 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.6)

com.squareup.okhttp3:okhttp MAVEN version 3.14.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - club.pizzalord:galadriel =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.5, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =0.0.14...

com.9ls:nest-api-jdk (0.0.2), com.aliyun.schedulerx:schedulerx2-spring-boot-starter (>=1.3.4, <=1.9.0) +199 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.8)

com.squareup.okhttp3:okhttp MAVEN version 3.14.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.9ls:nest-api-jdk 0.0.2 - com.aliyun.schedulerx:schedulerx2-spring-boot-starter =1.3.4, =1.1.1, =0.4....

ai.databand:dbnd-agent (>=0.80.7, <=0.82.5), ai.databand:dbnd-api-deequ (>=0.80.7, <=0.82.5) +5842 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.9)

com.squareup.okhttp3:okhttp MAVEN version 3.14.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.databand:dbnd-agent =0.80.7, =0.80.7, =0.80.7, =0.80.7, =0.0.3, =1.0.2, =0.0.0.2-alpha, =1.0.0-beta03...

ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0), ai.h2o:sparkling-water-core_2.12 (>=3.32.1.2-1-3.1, <=3.36.0.2-1-3.1) +910 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.12)

com.squareup.okhttp3:okhttp MAVEN version 3.12.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.ancf.lmos:lmos-operator =0.5.0, =3.32.1.2-1-3.1, =3.34.0.3-1-3.1, =3.34.0.3-1-3.1, =3.34.0.3-1-3.1,...

cf.ystapi:ystapi (>=beta-0.0.1.3, <=beta-0.0.1.7), com.easemob.im:im-sdk-core (>=1.0.2, <=1.0.4) +42 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.13.0)

com.squareup.okhttp3:okhttp MAVEN version 3.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - cf.ystapi:ystapi =beta-0.0.1.3, =1.0.2, =0.0.2, =0.0.3 - com.github.v-play-games:bot.commands.mod 0.0.2 ...

au.org.consumerdatastandards:client (>=0.9.6, <=1.0.0-rc5), au.org.consumerdatastandards:client-cli (>=0.9.6, <=1.0.0-rc5) +841 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.2)

com.squareup.okhttp3:okhttp MAVEN version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - au.org.consumerdatastandards:client =0.9.6, =0.9.6, =1.0.0-m11, =0.0.1-m8, =1.0.0-m6, =0.0.1-m15,...

cloud.topcode.open:topcode-base-pay (>=1.0.1, <=1.0.1.1), cn.6xyun.android:http (>=0.2.22, <=0.2.23) +1392 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.13)

com.squareup.okhttp3:okhttp MAVEN version 3.12.13 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - cloud.topcode.open:topcode-base-pay =1.0.1, =0.2.22, =1.1.8, =3.1.1, =3.8.1, =3.1.1, =1.9.1, =1.8.1,...

ai.evolv:ascend-sdk (0.5.0), city.smartb.ssm:f2-commons (0.1.0) +404 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.0)

com.squareup.okhttp3:okhttp MAVEN version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.evolv:ascend-sdk 0.5.0 - city.smartb.ssm:f2-commons 0.1.0 - city.smartb.ssm:f2-create-ssm 0.1.0 -...