Skip to content
OpenAdvisories
Medium RHSA-2021:1511 3 CVEs

Red Hat Security Advisory: AMQ Clients 2.9.1 release and security update

Published Sep 13, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 29

ReleasePackageFixed in
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 python-qpid-proton 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 python-qpid-proton-docs 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-c 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-c-devel 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-c-docs 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-cpp 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-cpp-devel 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-cpp-docs 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-debuginfo 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 qpid-proton-tests 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el7 rubygem-qpid_proton 0:0.33.0-6.el7_9
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 python-qpid-proton-docs 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 python3-qpid-proton 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 python3-qpid-proton-debuginfo 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-c 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-c-debuginfo 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-c-devel 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-c-docs 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-cpp 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-cpp-debuginfo 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-cpp-devel 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-cpp-docs 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-debuginfo 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-debugsource 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 qpid-proton-tests 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 rubygem-qpid_proton 0:0.33.0-8.el8
Red Hat · A Mq Clients 2 a_mq_clients:2::el8 rubygem-qpid_proton-debuginfo 0:0.33.0-8.el8

Vulnerabilities 3

  • Medium 6.2
    CVE-2021-21290

    Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files

    Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an…

    netty netty netty netty Debian Ubuntu Maven
  • Medium 5.9
    CVE-2021-21295 EPSS 19%

    Possible request smuggling in HTTP/2 due missing validation

    Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that…

    netty io.netty:netty-codec-http2 netty netty Debian Ubuntu Maven
  • Medium 5.9
    CVE-2021-21409

    Possible request smuggling in HTTP/2 due missing validation of content-length

    Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that…

    netty netty netty netty Debian Ubuntu Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_amq/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1927028
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1937364
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1944888
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1511.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-21290
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-21290
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-21290
  • report
    https://access.redhat.com/security/cve/CVE-2021-21295
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-21295
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-21295
  • article
    https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj
  • report
    https://access.redhat.com/security/cve/CVE-2021-21409
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-21409
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-21409
  • article
    https://github.com/netty/netty/security/advisories/GHSA-f256-j965-7f32