RHSA-2014:0245High

Red Hat Security Advisory: activemq security update

Published
March 3, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (4)

CVE-2013-2035 →CVE-2013-4152 →CVE-2013-4330 →CVE-2014-0003 →

📋 Description

CVE-2013-2035 — HawtJNI: predictable temporary file name leading to local arbitrary code execution CVE-2013-4152 — Framework: XML External Entity (XXE) injection flaw CVE-2013-4330 — Camel: remote code execution via header field manipulation CVE-2014-0003 — Camel: remote code execution via XSL

🎯 Affected products7

  • RHOSE Infrastructure 2.0
  • RHOSE Node 2.0
  • activemq-0:5.9.0-4.redhat.610328.el6op.src as a component of RHOSE Infrastructure 2.0
  • activemq-0:5.9.0-4.redhat.610328.el6op.src as a component of RHOSE Node 2.0
  • activemq-0:5.9.0-4.redhat.610328.el6op.x86_64 as a component of RHOSE Infrastructure 2.0
  • activemq-client-0:5.9.0-4.redhat.610328.el6op.x86_64 as a component of RHOSE Infrastructure 2.0
  • activemq-client-0:5.9.0-4.redhat.610328.el6op.x86_64 as a component of RHOSE Node 2.0

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258

🔗 References (7)