RHSA-2020:1538: Low: AMQ Online security update

Published Apr 22, 2020

Updated

The release of Red Hat AMQ Online 1.4.1 serves as a replacement for AMQ online 1.4.0, and includes bug fixes and enhancements, which are documented in the Release Notes document linked in the References.Security Fix(es): netty: compression/decompression codecs don't enforce limits on buffer allocation sizes (CVE-2020-11612) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

1 affected component

Red Hat AMQ Online

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Red Hat AMQ Online to a version that resolves this vulnerability.
Fixed in 1.4.1

Event History

Apr 22, 2020

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What is the severity of RHSA-2020:1538?

The severity of RHSA-2020:1538 is classified as low.

How do I fix RHSA-2020:1538?

To fix RHSA-2020:1538, update to Red Hat AMQ Online version 1.4.1 or later.

What vulnerabilities are addressed in RHSA-2020:1538?

RHSA-2020:1538 addresses vulnerabilities related to specific compression and decompression codecs in netty.

Is RHSA-2020:1538 related to any specific software?

RHSA-2020:1538 specifically affects Red Hat AMQ Online software.

What are the release notes for RHSA-2020:1538?

The release notes for RHSA-2020:1538 document the bug fixes and enhancements included in version 1.4.1.