Synopsis

Moderate: qpid security and bug fix update

Type/Severity

Security Advisory: Moderate

Topic

Updated qpid packages that fix multiple security issues and one bug are now
available for Red Hat Enterprise MRG 3 for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.

Description

Red Hat Enterprise MRG is a next-generation IT infrastructure incorporating
Messaging, Real Time, and Grid functionality. It offers increased
performance, reliability, interoperability, and faster computing for
enterprise customers.

MRG Messaging is a high-speed reliable messaging distribution for Linux
based on AMQP (Advanced Message Queuing Protocol), an open protocol
standard for enterprise messaging that is designed to make mission critical
messaging widely available as a standard service, and to make enterprise
messaging interoperable across platforms, programming languages, and
vendors.

MRG Messaging includes AMQP messaging broker; AMQP client libraries for
C++, Java JMS, and Python; as well as persistence libraries and
management tools.

It was discovered that the Qpid daemon (qpidd) did not restrict access to
anonymous users when the ANONYMOUS mechanism was disallowed.
(CVE-2015-0223)

A flaw was found in the way the Qpid daemon (qpidd) processed certain
protocol sequences. An unauthenticated attacker able to send a specially
crafted protocol sequence set that could use this flaw to crash qpidd.
(CVE-2015-0203, CVE-2015-0224)

Red Hat would like to thank the Apache Software Foundation for reporting
the CVE-2015-0203 issue. Upstream acknowledges G. Geshev from MWR Labs as
the original reporter.

This update also fixes the following bugs:

• Previously, the neutron messaging client rewrote (by method of
  "monkey-patching") the python selector module to support eventlet
  threading. The rewritten client did not update select.poll() during this
  process, which is used by qpid-python to manage I/O. This resulted in
  poll() deadlocks and neutron server hangs. The fix introduces updates to
  the python-qpid library that avoid calling poll() if eventlet threading is
  detected. Instead, the eventlet-aware select() is called, which prevents
  deadlocks from occurring and corrects the originally reported issue.
  (BZ#1175872)
  
• It was discovered that the QPID Broker aborted with an uncaught
  UnknownExchangeTypeException when the client attempted to request an
  unsupported exchange type. The code for the Exchange Registry and Node
  Policy has been improved to prevent this issue from happening again.
  (BZ#1186694)
  

Users of the Messaging capabilities of Red Hat Enterprise MRG 3, which is
layered on Red Hat Enterprise Linux 6, are advised to upgrade to these
updated packages, which correct these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise MRG Messaging 3 x86_64
• Red Hat Enterprise MRG Messaging 3 i386

Fixes

• BZ - 1175872 - [RHEL 6]neutron-server gets stuck in poll python-qpid 0.22
• BZ - 1181721 - CVE-2015-0203 qpid-cpp: 3 qpidd DoS issues in AMQP 0-10 protocol handling
• BZ - 1186302 - CVE-2015-0224 qpid-cpp: AMQP 0-10 protocol sequence-set maximal range DoS (incomplete CVE-2015-0203 fix)
• BZ - 1186308 - CVE-2015-0223 qpid-cpp: anonymous access to qpidd cannot be prevented

CVEs

• CVE-2015-0203
• CVE-2015-0223
• CVE-2015-0224

References

• http://www.redhat.com/security/updates/classification/#normal

Red Hat Enterprise MRG Messaging 3

SRPM
python-qpid-0.22-19.el6.src.rpm	SHA-256: c9c4aa805e1594dbd35cb707cc39cd0d8f005dcd192d756f47c1e962e143faed
qpid-cpp-0.22-51.el6.src.rpm	SHA-256: 7dd491db9abba7096d15ed67a8de90e71e5e74f9526dae05c1aa85be65ba1158
qpid-qmf-0.22-41.el6.src.rpm	SHA-256: 71ee02d2e6d3de74424380e0cf9c6c184888a4cc1569e415db6fce26465722e0
x86_64
python-qpid-0.22-19.el6.noarch.rpm	SHA-256: cbc945bc1cb3418f476c60822ae5970a55797541ce46605dadf32a5ff284c4a2
python-qpid-qmf-0.22-41.el6.x86_64.rpm	SHA-256: d0033e151a3ddd9b5b30ca84e610a0bf87f3324247ccffdfe1036bd8280df481
qpid-cpp-client-0.22-51.el6.i686.rpm	SHA-256: af7417f1adf161e0e80160fa9eb24c28efee6eee21d64e129af84843b7fe1cf3
qpid-cpp-client-0.22-51.el6.x86_64.rpm	SHA-256: ea5902fbd754295daef29ae780f783029bdc5f98a5ce58b2a59088df81fbad82
qpid-cpp-client-devel-0.22-51.el6.x86_64.rpm	SHA-256: 1198392afc2519959ecbecbecf0d67eb15a14f8b634f46f920c5391b19cd4b32
qpid-cpp-client-devel-docs-0.22-51.el6.noarch.rpm	SHA-256: 8b547ae2de33afd3d3e94a3c6cc0d55acf69285d2a2db705e40cae2297deb7a1
qpid-cpp-client-rdma-0.22-51.el6.x86_64.rpm	SHA-256: f38282cb31b9b0a531a43c0d5e159a2de22286eb95b3f9980307a33ec01b9c87
qpid-cpp-debuginfo-0.22-51.el6.i686.rpm	SHA-256: aa76fc19210ad0005b27092214d9af2c818db81ff36c1d19f8631ed45587e476
qpid-cpp-debuginfo-0.22-51.el6.x86_64.rpm	SHA-256: f6c0f7456b350789e9d1b0f8dc2e600bbf8c277645dd39d19702ff117b3d13c3
qpid-cpp-server-0.22-51.el6.i686.rpm	SHA-256: 13da8a7318b74bb03ee1e24e4947c9870357f49c7ae85e255225a7388634a2e4
qpid-cpp-server-0.22-51.el6.x86_64.rpm	SHA-256: 1750dad1668c968e06932fe608800c63bf665ec00bad7382e100e1521621ff8a
qpid-cpp-server-devel-0.22-51.el6.x86_64.rpm	SHA-256: 9b1214f8f40b30446cae7e01e764c29309dbf21c139227fb35ef73367f8f193c
qpid-cpp-server-ha-0.22-51.el6.x86_64.rpm	SHA-256: 1d4d00d01231c7ce2ea6699ad04265d327d92212405b8f82d919f5140cd2434f
qpid-cpp-server-linearstore-0.22-51.el6.x86_64.rpm	SHA-256: 95d4f463eafdfc10f12d8c3c8c293946bf8dbd819da2184dd7e931c088a5f08e
qpid-cpp-server-rdma-0.22-51.el6.x86_64.rpm	SHA-256: d88fee63a0019d8f9f8fab97d176462b7c5c3dc4db7dcd3ce3819bc4f62869c9
qpid-cpp-server-xml-0.22-51.el6.x86_64.rpm	SHA-256: 09cebedde70f44ec95e329ecb827c578900b12b0c39d994bdf96896f58192415
qpid-qmf-0.22-41.el6.i686.rpm	SHA-256: d909ccd8a28a9c67a2c682769f31d1068459f3a4ec3ff0eb1301223180950669
qpid-qmf-0.22-41.el6.x86_64.rpm	SHA-256: 5842b8143630f2bcd94e1c57771d7947ec390b34c225876d9ae483d081846833
qpid-qmf-debuginfo-0.22-41.el6.i686.rpm	SHA-256: 86d6b9044ca5ee1c90eb9e73443b0dc7a747d6e28fb1243e5aff73d7dd31dda5
qpid-qmf-debuginfo-0.22-41.el6.x86_64.rpm	SHA-256: 88043d8fbc6df97144df79d866f167a93b8a3b9f7d800e22cdcd44474124f311
qpid-qmf-devel-0.22-41.el6.x86_64.rpm	SHA-256: 2972be2a71e9f12887b32ca1d28e88b812a354959329b28c886418c8932d93d3
ruby-qpid-qmf-0.22-41.el6.x86_64.rpm	SHA-256: 5ee712913693ba8f89dc9ba45c3d9e3c05da6afe6ee23cfdbd5ffafda58a19bd
i386
python-qpid-0.22-19.el6.noarch.rpm	SHA-256: cbc945bc1cb3418f476c60822ae5970a55797541ce46605dadf32a5ff284c4a2
python-qpid-qmf-0.22-41.el6.i686.rpm	SHA-256: d3d641b230dd8ddecdda99e7bd1da05a89737d5b5404f2d73f68f5b4f1ead0af
qpid-cpp-client-0.22-51.el6.i686.rpm	SHA-256: af7417f1adf161e0e80160fa9eb24c28efee6eee21d64e129af84843b7fe1cf3
qpid-cpp-client-devel-0.22-51.el6.i686.rpm	SHA-256: cda45d2b689381fd177cf79950ca52635640b06ff561c8fcbad5bf7b1caba844
qpid-cpp-client-devel-docs-0.22-51.el6.noarch.rpm	SHA-256: 8b547ae2de33afd3d3e94a3c6cc0d55acf69285d2a2db705e40cae2297deb7a1
qpid-cpp-client-rdma-0.22-51.el6.i686.rpm	SHA-256: d3ff6ce2c26d22de7a4a7f6195253fdc988c16b1eb6ce3cfc4372e85f8376e0d
qpid-cpp-debuginfo-0.22-51.el6.i686.rpm	SHA-256: aa76fc19210ad0005b27092214d9af2c818db81ff36c1d19f8631ed45587e476
qpid-cpp-server-0.22-51.el6.i686.rpm	SHA-256: 13da8a7318b74bb03ee1e24e4947c9870357f49c7ae85e255225a7388634a2e4
qpid-cpp-server-devel-0.22-51.el6.i686.rpm	SHA-256: 1689d2019d08aebc986cb3874c77c7f21cfb0368350ebd0edccec86e2c675581
qpid-cpp-server-ha-0.22-51.el6.i686.rpm	SHA-256: beb3cae98705e56dabf047cdd572c299657790c1029e6c401620e88b0cbcc53b
qpid-cpp-server-linearstore-0.22-51.el6.i686.rpm	SHA-256: 329a5da4037eb9a9416017c72c2ee754a1392b84b58bde8e6d48e1aee5aa462a
qpid-cpp-server-rdma-0.22-51.el6.i686.rpm	SHA-256: 7b25cce64240936b30cc9a73b9ae44c68213036943fa76b55e7d855c3f926df6
qpid-cpp-server-xml-0.22-51.el6.i686.rpm	SHA-256: 4ccd898443163c25fbeda2d9f0987720619442498f615b4b52231f8b5f805a2b
qpid-qmf-0.22-41.el6.i686.rpm	SHA-256: d909ccd8a28a9c67a2c682769f31d1068459f3a4ec3ff0eb1301223180950669
qpid-qmf-debuginfo-0.22-41.el6.i686.rpm	SHA-256: 86d6b9044ca5ee1c90eb9e73443b0dc7a747d6e28fb1243e5aff73d7dd31dda5
qpid-qmf-devel-0.22-41.el6.i686.rpm	SHA-256: 20ece2c82aa04c87f01e57c892dff0960d2f3a5aaf095967140fdcf77db6d378
ruby-qpid-qmf-0.22-41.el6.i686.rpm	SHA-256: 26e35eb264cd95d1051c098bf728e1f50b2e0fa891f5f6ef17f330f6618081c7