Red Hat Security Advisory: Red Hat AMQ Broker 7.9.0 release and security update

CVE-2020-13956 — apache-httpclient: incorrect handling of malformed authority component in request URIs CVE-2020-27223 — jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS CVE-2021-3425 — Broker: discloses JDBC username and password in the application log file CVE-2021-3763 — 7: Incorrect privilege in Management Console CVE-2021-20289 — resteasy: Error message exposes endpoint class information CVE-2021-21290 — netty: Information disclosure via the local system temporary directory CVE-2021-21295 — netty: possible request smuggling in HTTP/2 due missing validation CVE-2021-21409 — netty: Request smuggling via content-length header CVE-2021-28163 — jetty: Symlink directory exposes webapp directory contents CVE-2021-28164 — jetty: Ambiguous paths can access WEB-INF CVE-2021-28165 — jetty: Resource exhaustion when receiving an invalid large TLS frame CVE-2021-28169 — jetty: requests to the ConcatServlet and WelcomeFilter are able to access protected resources within the WEB-INF directory CVE-2021-29425 — apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6 CVE-2021-34428 — jetty: SessionListener can prevent a session from being invalidated breaking logout CVE-2021-34429 — jetty: crafted URIs allow bypassing security constraints