Red Hat Security Advisory: AMQ Clients 2.7.0 Release

Fixed packages 60

Vulnerabilities 1

• High 7.5
  CVE-2020-11612

  Denial of Service in Netty

  The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to …

  netty netty io.netty:netty-handler Debian Ubuntu Maven
  Apr 7, 2020

References

• article
  https://access.redhat.com/security/updates/classification/#low
• article
  https://access.redhat.com/documentation/en-us/red_hat_amq/
• article
  https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?downloadType=distributions&product=jboss.amq.clients&version=2.7.0
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1816216
• article
  https://issues.redhat.com/browse/ENTMQCL-1107
• article
  https://issues.redhat.com/browse/ENTMQCL-1150
• article
  https://issues.redhat.com/browse/ENTMQCL-1297
• article
  https://issues.redhat.com/browse/ENTMQCL-1736
• article
  https://issues.redhat.com/browse/ENTMQCL-1737
• article
  https://issues.redhat.com/browse/ENTMQCL-1738
• article
  https://issues.redhat.com/browse/ENTMQCL-1739
• article
  https://issues.redhat.com/browse/ENTMQCL-1854
• article
  https://issues.redhat.com/browse/ENTMQCL-1861
• article
  https://issues.redhat.com/browse/ENTMQCL-1922
• article
  https://issues.redhat.com/browse/ENTMQCL-1985
• article
  https://issues.redhat.com/browse/ENTMQCL-761
• article
  https://issues.redhat.com/browse/ENTMQCL-797
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2605.json
• report
  https://access.redhat.com/security/cve/CVE-2020-11612
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-11612
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-11612