Skip to content
OpenAdvisories
High RHSA-2020:3817 4 CVEs

Red Hat Security Advisory: AMQ Clients 2.8.0 Release

Published Sep 20, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 51

ReleasePackageFixed in
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 python-qpid-proton 0:0.32.0-1.el6_10
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 python-qpid-proton-docs 0:0.32.0-1.el6_10
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-cpp 0:1.36.0-31.el6_10amq
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-cpp-client 0:1.36.0-31.el6_10amq
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-cpp-client-devel 0:1.36.0-31.el6_10amq
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-cpp-client-docs 0:1.36.0-31.el6_10amq
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-cpp-debuginfo 0:1.36.0-31.el6_10amq
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-proton 0:0.32.0-1.el6_10
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-proton-c 0:0.32.0-1.el6_10
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-proton-c-devel 0:0.32.0-1.el6_10
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-proton-c-docs 0:0.32.0-1.el6_10
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-proton-cpp 0:0.32.0-1.el6_10
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-proton-cpp-devel 0:0.32.0-1.el6_10
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-proton-cpp-docs 0:0.32.0-1.el6_10
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-proton-debuginfo 0:0.32.0-1.el6_10
Red Hat · A Mq Clients 2 a_mq_clients:2::el6 qpid-proton-tests 0:0.32.0-1.el6_10
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 python-qpid-proton 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 python-qpid-proton-docs 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-cpp 0:1.36.0-31.el7amq
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-cpp-client 0:1.36.0-31.el7amq
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-cpp-client-devel 0:1.36.0-31.el7amq
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-cpp-client-docs 0:1.36.0-31.el7amq
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-cpp-debuginfo 0:1.36.0-31.el7amq
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-c 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-c-devel 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-c-docs 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-cpp 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-cpp-devel 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-cpp-docs 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-debuginfo 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-tests 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 rubygem-qpid_proton 0:0.32.0-2.el7
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 nodejs-rhea 0:1.0.24-1.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 python-qpid-proton-docs 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 python3-qpid-proton 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 python3-qpid-proton-debuginfo 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-c 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-c-debuginfo 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-c-devel 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-c-docs 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-cpp 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-cpp-debuginfo 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-cpp-devel 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-cpp-docs 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-debuginfo 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-debugsource 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-tests 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 rubygem-qpid_proton 0:0.32.0-2.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 rubygem-qpid_proton-debuginfo 0:0.32.0-2.el8

Vulnerabilities 4

  • High 8.8
    CVE-2020-11113 Public exploit

    jackson-databind mishandles the interaction between serialization gadgets and typing

    FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • Medium 6.5
    CVE-2020-14297

    Wildfly EJB Client causes DoS

    A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and…

    Red Hat wildfly org.jboss:jboss-ejb-client Maven
  • Medium 6.5
    CVE-2020-14307

    A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where Ses…

    Red Hat wildfly
  • Low 3.7
    CVE-2020-9488 Public exploit

    Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

    Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.…

    Apache Apache Log4j apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_amq
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1821315
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1831139
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1851327
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1853595
  • article
    https://issues.redhat.com/browse/ENTMQCL-1987
  • article
    https://issues.redhat.com/browse/ENTMQCL-1988
  • article
    https://issues.redhat.com/browse/ENTMQCL-2070
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3817.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-9488
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-9488
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-9488
  • report
    https://access.redhat.com/security/cve/CVE-2020-11113
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-11113
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-11113
  • article
    https://github.com/FasterXML/jackson-databind/issues/2670
  • report
    https://access.redhat.com/security/cve/CVE-2020-14297
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-14297
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-14297
  • report
    https://access.redhat.com/security/cve/CVE-2020-14307
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-14307
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-14307