RHBA-2023:6164 - Bug Fix Advisory

Topic

An new update is now available for Red Hat AMQ Streams running on OpenShift Container Platform.

Description

Red Hat AMQ Streams is a Java/Scala publish-subscribe-based messaging broker. Based on the Apache Kafka project, offers a distributed backbone that allows microservices and other applications to share data with extremely high throughput and extremely low latency.

Solution

Red Hat AMQ Streams on OpenShift

Affected Products

• Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.10 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.9 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.8 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform for Power 4.10 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for Power 4.9 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for Power 4.8 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.10 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.9 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.8 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for ARM 64 4.10 aarch64

Fixes

• ENTMQST-5400 - [PROD] Respin Streams 2.5.1 for HTTP/2 (CVE-2023-44487)

CVEs

• CVE-2023-22025
• CVE-2023-22081
• CVE-2023-40217
• CVE-2023-44487

References

(none)