Skip to content
OpenAdvisories
Unscored RHSA-2013:0561 3 CVEs

Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.3 security update

Published Sep 22, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 36

ReleasePackageFixed in
Red Hat · MRG 2 enterprise_mrg:2::el5 cumin-messaging 0:0.1.1-2.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 mrg-release 0:2.3.0-1.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 python-qpid 0:0.18-4.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 python-qpid-qmf 0:0.18-15.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 python-saslwrapper 0:0.18-1.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-client 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-client-devel 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-client-devel-docs 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-client-rdma 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-client-ssl 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-mrg 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-mrg-debuginfo 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-cluster 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-devel 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-rdma 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-ssl 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-store 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-cpp-server-xml 0:0.18-14.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-java 0:0.18-7.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-java-client 0:0.18-7.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-java-common 0:0.18-7.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-java-example 0:0.18-7.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-jca 0:0.18-8.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-jca-xarecovery 0:0.18-8.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-qmf 0:0.18-15.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-qmf-debuginfo 0:0.18-15.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-qmf-devel 0:0.18-15.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-tests 0:0.18-2.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 qpid-tools 0:0.18-8.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 rhm-docs 0:0.18-2.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 ruby-qpid-qmf 0:0.18-15.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 ruby-saslwrapper 0:0.18-1.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 saslwrapper 0:0.18-1.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 saslwrapper-debuginfo 0:0.18-1.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 saslwrapper-devel 0:0.18-1.el5

Vulnerabilities 3

  • Medium —
    CVE-2012-4446

    Improper Authentication in Apache Qpid

    The default configuration for Apache Qpid 0.20 and earlier, when the federation_tag attribute is enabled, accepts AMQP connections without checking the source user ID, which allows remote attackers to bypass authentication and have other unspecified impact vi…

    qpid-cpp org.apache.qpid:qpid-client Ubuntu Maven
  • Unscored —
    CVE-2012-4458

    The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service (memory cons…

    qpid-cpp Ubuntu
  • Unscored —
    CVE-2012-4459

    Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote at…

    qpid-cpp Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/RHSA-2013-0561.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=678612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=710787
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=720714
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=737685
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=740485
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=754990
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=773719
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=781496
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=782806
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=783215
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=784957
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=786555
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=790004
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=800912
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=801605
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=804752
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=813742
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=814356
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=834256
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=836141
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=846465
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=849788
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=849790
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=851355
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=856299
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=860011
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=861234
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=861241
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=861838
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=866677
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=868403
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=868881
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=870058
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=871774
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=876193
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=876664
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877081