Skip to content
OpenAdvisories
High RHSA-2013:1024 1 CVE

Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.3.3 security update

Published Sep 13, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 37

ReleasePackageFixed in
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 python-qpid 0:0.18-5.el6_4
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 python-qpid-qmf 0:0.18-18.el6_4
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 qpid-cpp 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 qpid-cpp-client 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 qpid-cpp-client-ssl 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 qpid-cpp-debuginfo 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 qpid-cpp-server 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 qpid-cpp-server-ssl 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 qpid-qmf 0:0.18-18.el6_4
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 qpid-qmf-debuginfo 0:0.18-18.el6_4
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 qpid-tools 0:0.18-10.el6_4
Red Hat · MRG 2 enterprise_mrg:2:computenode:el6 ruby-qpid-qmf 0:0.18-18.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 python-qpid 0:0.18-5.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 python-qpid-qmf 0:0.18-18.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-client 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-client-devel 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-client-devel-docs 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-client-rdma 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-client-ssl 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-debuginfo 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-server 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-server-cluster 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-server-devel 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-server-rdma 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-server-ssl 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-server-store 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-cpp-server-xml 0:0.18-17.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-java 0:0.18-8.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-java-client 0:0.18-8.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-java-common 0:0.18-8.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-java-example 0:0.18-8.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-qmf 0:0.18-18.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-qmf-debuginfo 0:0.18-18.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-qmf-devel 0:0.18-18.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 qpid-tools 0:0.18-10.el6_4
Red Hat · MRG 2 enterprise_mrg:2:server:el6 ruby-qpid-qmf 0:0.18-18.el6_4

Vulnerabilities 1

  • High 7.5
    CVE-2013-1909

    Apache Qpid Python client Improper certificate validation

    The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an…

    qpid-python PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=928530
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1024.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-1909
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-1909
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-1909
  • article
    http://qpid.apache.org/release_notes_0.22.html
  • article
    https://issues.apache.org/jira/browse/QPID-4918