Skip to content
OpenAdvisories
Unscored RHSA-2012:1277 2 CVEs

Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.2 update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · MRG 2 enterprise_mrg:2::el5 mrg-release 0:2.2.0-1.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 python-qpid 0:0.14-11.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 python-qpid-qmf 0:0.14-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-client 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-client-devel 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-client-devel-docs 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-client-rdma 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-client-ssl 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-mrg 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-mrg-debuginfo 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-cluster 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-devel 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-rdma 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-ssl 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-store 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-xml 0:0.14-22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-java 0:0.18-2.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-java-client 0:0.18-2.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-java-common 0:0.18-2.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-java-example 0:0.18-2.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-jca 0:0.18-2.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-jca-xarecovery 0:0.18-2.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-qmf 0:0.14-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-qmf-debuginfo 0:0.14-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-qmf-devel 0:0.14-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-tools 0:0.14-6.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 ruby-qpid-qmf 0:0.14-14.el5

Vulnerabilities 2

  • Unscored —
    CVE-2012-2145

    Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to c…

  • Medium —
    CVE-2012-3467

    Apache QPID Allows Remote Authentication Bypass

    Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which allows remote attackers to bypass authentication.

    org.apache.qpid:qpid-parent Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/sec-Red_Hat_Enterprise_Linux_5.html#RHSA-2012-1277
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=689408
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=693444
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=809357
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=817175
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=836276
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=841488
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1277.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-2145
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2145
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2145
  • report
    https://access.redhat.com/security/cve/CVE-2012-3467
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-3467
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-3467