RHSA-2018:2020: Moderate: Red Hat JBoss Fuse/A-MQ 6.3 R8 security and bug fix update
Red Hat JBoss Fuse, based on Apache ServiceMix, provides a small-footprint, flexible, open source enterprise service bus and integration platform. Red Hat JBoss A-MQ, based on Apache ActiveMQ, is a standards compliant messaging system that is tailored for use in mission critical applications.This patch is an update to Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. It includes bug fixes and enhancements, which are documented in the readme.txt file included with the patch files.Security Fix(es): spark: Absolute and relative pathnames allow for unintended static file disclosure (CVE-2018-9159)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2018:2020?
The severity of RHSA-2018:2020 is classified as moderate.
How do I fix RHSA-2018:2020?
To fix RHSA-2018:2020, you should apply the latest patches available for Red Hat JBoss Fuse and Red Hat JBoss A-MQ.
What vulnerabilities does RHSA-2018:2020 address?
RHSA-2018:2020 addresses security vulnerabilities in Red Hat JBoss Fuse and Red Hat JBoss A-MQ related to improper input validation.
Which versions of Red Hat products are affected by RHSA-2018:2020?
RHSA-2018:2020 affects multiple versions of Red Hat JBoss Fuse and Red Hat JBoss A-MQ.
Is there a workaround for RHSA-2018:2020?
There is no official workaround for RHSA-2018:2020; patching is recommended to mitigate the vulnerabilities.