Red Hat Security Advisory

RHSA-2025:13274

Red Hat AMQ Broker 7.13.1 release and security update

Released 2025-08-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat AMQ Broker 7.13.1

Fixes 3 records

TI-2025-30956 CVE-2025-48734 · GHSA-wxr5-93ph-8wr9

Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

HIGH 73

Improper Access Control vulnerability in Apache Commons.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02018 Published 2025-05-28 Partial fix · 1.11.0, 2.0.0-M2 CWE-284

TI-2025-31226 CVE-2025-49146 · GHSA-hq9p-pm7w-8p54

pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration

MEDIUM 42

pgjdbc is an open source postgresql JDBC Driver.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00488 Published 2025-06-11 Partial fix · 42.7.7 CWE-287

TI-2025-01693 CVE-2025-1948 · GHSA-889j-63jv-qhr8

Eclipse Jetty HTTP clients can increase memory allocation

MEDIUM 40

In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 settings parameter SETTINGS_MAX_HEADER_LIST_SIZE.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00781 Published 2025-05-08 Fixed in 12.0.17 CWE-400