RHBA-2024:0706 - Bug Fix Advisory

Topic

An new update is now available for Red Hat AMQ Streams running on OpenShift Container Platform.

Description

Red Hat AMQ Streams is a Java/Scala publish-subscribe-based messaging broker. Based on the Apache Kafka project, offers a distributed backbone that allows microservices and other applications to share data with extremely high throughput and extremely low latency.

Solution

Red Hat AMQ Streams on OpenShift

Affected Products

• Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.11 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.10 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.9 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform 4.8 for RHEL 8 x86_64
• Red Hat OpenShift Container Platform for Power 4.10 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for Power 4.9 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for Power 4.8 for RHEL 8 ppc64le
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.10 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.9 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.8 for RHEL 8 s390x
• Red Hat OpenShift Container Platform for ARM 64 4.10 aarch64

Fixes

• ENTMQST-5641 - [PROD] Respin Streams 2.5.1 JDK CVE

CVEs

• CVE-2007-4559
• CVE-2021-3468
• CVE-2022-3094
• CVE-2022-48468
• CVE-2023-3138
• CVE-2023-3446
• CVE-2023-3817
• CVE-2023-4641
• CVE-2023-5388
• CVE-2023-5678
• CVE-2023-5981
• CVE-2023-7104
• CVE-2023-27043
• CVE-2023-32324
• CVE-2023-34241
• CVE-2023-38469
• CVE-2023-38470
• CVE-2023-38471
• CVE-2023-38472
• CVE-2023-38473
• CVE-2023-39615
• CVE-2024-20918
• CVE-2024-20919
• CVE-2024-20921
• CVE-2024-20932
• CVE-2024-20945
• CVE-2024-20952

References

(none)