Red Hat Security Advisory

RHSA-2021:1511

AMQ Clients 2.9.1 release and security update

Released 2021-05-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat AMQ Clients 2 python-qpid-proton-0.33.0-6.el7_9, python-qpid-proton-docs-0.33.0-6.el7_9, python-qpid-proton-docs-0.33.0-8.el8 +19

Fixes 3 records

TI-2021-04395 CVE-2021-21295 · GHSA-wm47-8v5p-wjpj

Possible request smuggling in HTTP/2 due missing validation

MEDIUM 50

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.18891 Published 2021-03-09 Partial fix · 4.1.60.Final CWE-444

TI-2021-04507 CVE-2021-21409 · GHSA-f256-j965-7f32

Possible request smuggling in HTTP/2 due missing validation of content-length

MEDIUM 40

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.04935 Published 2021-03-30 Partial fix · 4.1.61.Final CWE-444

TI-2021-04390 CVE-2021-21290 · GHSA-5mcr-gq6c-3hq2

Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files

LOW 31

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.01799 Published 2021-02-08 Partial fix · 4.1.59.Final CWE-378