https://bugzilla.redhat.com/show_bug.cgi?id=1785376
--- Comment #21 from Jonathan Christison <jochrist(a)redhat.com> ---
Marking Red Hat AMQ Streams and Red Hat AMQ Online as not affected, both AMQ-ON
and AMQ-ST were incorrectly marked as being affected on Thursday 3rd of June
2021 after investigations into the secondary artifact
io.prometheus.jmx:jmx_prometheus_javaagent:jar:* which shades/bundles
snakeyaml.
The version of snakeyaml in use by the
io.prometheus.jmx:jmx_prometheus_javaagent:jar:0.14.0.redhat-00002 is
org.yaml:snakeyaml:jar:1.26.0.redhat-00002 which is not affected by this
vulnerability, this was fixed in AMQ Streams version 1.6.0 onwards.
AMQ Online was not affected by this vulnerability through
io.prometheus.jmx:jmx_prometheus_javaagent:jar:*.
--
You are receiving this mail because:
You are on the CC list for the bug.