RHSA-2023:7697: Moderate: AMQ Clients 2023.Q4

Each Red Hat AMQ Client enables sending, and receiving messages to or from AMQ Broker 7.This update provides various bug fixes and enhancements in addition to theclient package versions previously released on Red Hat Enterprise Linux 8and 9.Security Fix(es): (CVE-2023-34050) springframework-amqp: Deserialization Vulnerability (CVE-2023-34462) netty: SniHandler 16MB allocation leads to OOM (CVE-2023-40167) jetty: Improper validation of HTTP/1 content-length (CVE-2022-1471) SnakeYaml: Constructor Deserialization Remote Code Execution (CVE-2022-25857) snakeyaml: Denial of Service due to missing nested depth limitation for collections (CVE-2022-38749) snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode (CVE-2022-41854) dev-java/snakeyaml: DoS via stack overflow (CVE-2023-1370) json-smart: Uncontrolled Resource Consumption vulnerability in json-smart (Resource Exhaustion) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.