Red Hat Security Advisory

RHSA-2019:2781

qpid-proton security update

Released 2019-09-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Satellite Tools 6.3 (v. 5.9.AUS Server) python-qpid-proton-0.9-22.el5, python-qpid-proton-0.9-22.el5.i386, qpid-proton-0.9-22.el5 +2
Satellite Tools 6.3 (v. 5.9.ELS Server) python-qpid-proton-0.9-22.el5, python-qpid-proton-0.9-22.el5.i386, qpid-proton-0.9-22.el5 +2
Satellite Tools 6.3 (v. 6 Client) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
Satellite Tools 6.3 (v. 6 ComputeNode) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
Satellite Tools 6.3 (v. 6 Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
Satellite Tools 6.3 (v. 6 Workstation) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
Satellite Tools 6.3 (v. 6.4.AUS Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
Satellite Tools 6.3 (v. 6.5.AUS Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
Satellite Tools 6.3 (v. 6.6.AUS Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
Satellite Tools 6.3 (v. 6.7.EUS ComputeNode) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
Satellite Tools 6.3 (v. 6.7.EUS Server) python-qpid-proton-0.16.0-14.el6sat, qpid-proton-0.16.0-14.el6sat, qpid-proton-c-0.16.0-14.el6sat
Satellite Tools 6.3 (v. 7 ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7 Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7 Workstation) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.2.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.2.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.2.EUS ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.2.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.3.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.3.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.3.EUS ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.3.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.4.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.4.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.4.EUS ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.4.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.5.EUS ComputeNode) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.5.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.6.AUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.6.E4S Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.6.EUS Compute Node) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. 7.6.EUS Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 6.3 (v. RHEL-ALT 7.6 Server) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat
Satellite Tools 7.3 (v. 7 Client) python-qpid-proton-0.16.0-14.el7sat, qpid-proton-0.16.0-14.el7sat, qpid-proton-c-0.16.0-14.el7sat

Fixes 1 record

TI-2019-00196 CVE-2019-0223

While investigating bug PROTON-2014, we discovered that under some circumstances Apache…

MEDIUM 42

While investigating bug PROTON-2014, we discovered that under some circumstances Apache Qpid Proton versions 0.9 to 0.27.0 (C library and its language bindings) can connect to a peer anonymously using TLS *even when conf…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.06228 Published 2019-04-23 Partial fix