Red Hat Security Advisory

RHSA-2014:0245

activemq security update

Released 2014-03-03 · Red Hat rating Important · View on Red Hat →

Fixed in

RHOSE Infrastructure 2.0 activemq-5.9.0-4.redhat.610328.el6op, activemq-client-5.9.0-4.redhat.610328.el6op
RHOSE Node 2.0 activemq-5.9.0-4.redhat.610328.el6op, activemq-client-5.9.0-4.redhat.610328.el6op

Fixes 4 records

TI-2013-03625 CVE-2013-4152 · GHSA-rp4p-g69r-438x

The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB…

MEDIUM 52

The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial o…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.25634 Published 2014-01-23 Fixed in 3.2.4.RELEASE CWE-264

TI-2014-00003 CVE-2014-0003 · GHSA-h6rp-8v4j-hwph

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and…

MEDIUM 43

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07492 Published 2014-03-20 Fixed in 2.11.4, 2.12.3 CWE-264

TI-2013-03793 CVE-2013-4330 · GHSA-x9fv-c87w-55wc

Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows…

MEDIUM 41

Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.08492 Published 2013-10-04 Fixed in 2.9.7, 2.10.7 +2 CWE-94

TI-2013-01806 CVE-2013-2035 · GHSA-49j7-qghp-5wj8

Race condition in…

LOW 21

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwri…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00589 Published 2013-08-28 Partial fix · 1.8 CWE-94