First published: Tue Jun 26 2018(Updated: )
Red Hat JBoss Fuse, based on Apache ServiceMix, provides a small-footprint, flexible, open source enterprise service bus and integration platform. <br>Red Hat JBoss A-MQ, based on Apache ActiveMQ, is a standards compliant messaging system that is tailored for use in mission critical applications.<br>This patch is an update to Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. It includes bug fixes and enhancements, which are documented in the readme.txt file included with the patch files.<br>Security Fix(es):<br><li> spark: Absolute and relative pathnames allow for unintended static file disclosure (CVE-2018-9159)</li>
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat Fuse | ||
Red Hat JBoss Fuse/A-MQ |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2018:2020 is classified as moderate.
To fix RHSA-2018:2020, you should apply the latest patches available for Red Hat JBoss Fuse and Red Hat JBoss A-MQ.
RHSA-2018:2020 addresses security vulnerabilities in Red Hat JBoss Fuse and Red Hat JBoss A-MQ related to improper input validation.
RHSA-2018:2020 affects multiple versions of Red Hat JBoss Fuse and Red Hat JBoss A-MQ.
There is no official workaround for RHSA-2018:2020; patching is recommended to mitigate the vulnerabilities.