First published: Tue Dec 14 2021(Updated: )
Red Hat AMQ Streams, based on the Apache Kafka project, offers a distributed backbone that allows microservices and other applications to share data with extremely high throughput and extremely low latency. <br>This release of Red Hat AMQ Streams 1.6.5 serves as a replacement for Red Hat AMQ Streams 1.6.4, and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section.<br>Security Fix(es):<br><li> log4j-core: Remote code execution in Log4j 2.x when logs contain an attacker-controlled string value (CVE-2021-44228)</li> For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
Red Hat AMQ Streams |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2021:5133 is classified as important.
To fix RHSA-2021:5133, upgrade to the latest available version of Red Hat AMQ Streams.
RHSA-2021:5133 addresses vulnerabilities related to Apache Kafka components within Red Hat AMQ Streams.
A reboot is not required after applying the fix for RHSA-2021:5133.
RHSA-2021:5133 affects Red Hat AMQ Streams versions prior to 1.6.5.