(RHSA-2018:2020) Moderate: Red Hat JBoss Fuse/A-MQ 6.3 R8 security and bug fix update

2018-06-26T20:39:25
ID RHSA-2018:2020
Type redhat
Reporter RedHat
Modified 2018-06-26T20:39:41

Description

Red Hat JBoss Fuse, based on Apache ServiceMix, provides a small-footprint, flexible, open source enterprise service bus and integration platform.

Red Hat JBoss A-MQ, based on Apache ActiveMQ, is a standards compliant messaging system that is tailored for use in mission critical applications.

This patch is an update to Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. It includes bug fixes and enhancements, which are documented in the readme.txt file included with the patch files.

Security Fix(es):

  • spark: Absolute and relative pathnames allow for unintended static file disclosure (CVE-2018-9159)