RHSA-2023:6849: Critical: Red Hat JBoss Fuse/A-MQ Fuse 6.3 R20 HF1 security and bug fix update
Red Hat Fuse provides a small-footprint, flexible, open source enterprise service bus and integration platform. Red Hat A-MQ is a standards compliant messaging system that is tailored for use in mission critical applications.<br>This patch is an update to Red Hat Fuse 6.3 and Red Hat A-MQ 6.3. It includes bug fixes, which are documented in the patch notes accompanying the package on the download page. See the download link given in the references section below.<br>Security Fix(es):<br><li> activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack (CVE-2023-46604)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:6849?
The severity of RHSA-2023:6849 is categorized as moderate.
How do I fix RHSA-2023:6849?
To fix RHSA-2023:6849, you should apply the latest patch provided through the Red Hat update tools.
Which versions of Red Hat software are affected by RHSA-2023:6849?
RHSA-2023:6849 affects Red Hat JBoss Fuse 6.3 and Red Hat A-MQ.
What vulnerabilities does RHSA-2023:6849 address?
RHSA-2023:6849 addresses multiple vulnerabilities that could impact the security and functionality of the affected products.
Is it mandatory to update to fix RHSA-2023:6849?
Yes, it is highly recommended to update to mitigate potential risks associated with the vulnerabilities addressed in RHSA-2023:6849.