RHBA-2016:0444 - Bug Fix Advisory

Topic

Updated Red Hat Enterprise MRG Messaging 3.2 packages are now available for Red Hat Enterprise Linux 7.

Description

Red Hat Enterprise MRG is a next-generation IT infrastructure incorporating
Messaging, Realtime, and Grid functionality. It offers increased performance,
reliability, interoperability, and faster computing for enterprise customers.

MRG Messaging is a high-speed reliable messaging distribution for Linux based on
AMQP (Advanced Message Queuing Protocol), an open protocol standard for
enterprise messaging that is designed to make mission critical messaging widely
available as a standard service, and to make enterprise messaging interoperable
across platforms, programming languages, and vendors.

MRG Messaging includes AMQP messaging broker; AMQP client libraries for C++,
Java JMS, and Python; as well as persistence libraries and management tools.

These updated packages for Red Hat Enterprise Linux 7 include a bug
fix for the Messaging component of MRG.

It was found that any message property declared as an unsigned 16 bit integer would get converted to an unsigned 8 bit value in the broker. If the value was greater than 255, an error would occur in the conversion.

The code has been updated to ensure the conversion performs as expected and unsigned 16 bit integer values in the message header are now correctly maintained in the broker.(BZ#11301359)

Users of Red Hat Enterprise MRG Messaging 3.2 on Red Hat Enterprise Linux 7 are
advised to upgrade to these updated packages.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat Enterprise MRG Messaging 3 for RHEL 7 3 x86_64

Fixes

• BZ - 1308695 - uint16 message properties decoded as uint8 [rhel-7]

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal