RHSA-2014:0401Medium

Red Hat Security Advisory: Red Hat JBoss A-MQ 6.1.0 update

Published
April 14, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (9)

CVE-2013-1624 →CVE-2013-2035 →CVE-2013-2192 →CVE-2013-4152 →CVE-2013-6429 →CVE-2013-6430 →CVE-2014-0050 →CVE-2014-0054 →CVE-2014-1904 →

📋 Description

CVE-2013-1624 — bouncycastle: TLS CBC padding timing attack CVE-2013-2035 — HawtJNI: predictable temporary file name leading to local arbitrary code execution CVE-2013-2192 — hadoop: man-in-the-middle vulnerability CVE-2013-4152 — Framework: XML External Entity (XXE) injection flaw CVE-2013-6429 — Framework: XML External Entity (XXE) injection flaw CVE-2013-6430 — Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters CVE-2014-0050 — apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream CVE-2014-0054 — Framework: incomplete fix for CVE-2013-7315/CVE-2013-6429 CVE-2014-1904 — Framework: cross-site scripting flaw when using Spring MVC

🎯 Affected products1

  • Red Hat JBoss A-MQ 6.1

✅ Remediation

The References section of this erratum contains a download link (you must log in to download the update).

🔗 References (14)