CVE:CVE-2019-0223
CNNVD:CNNVD-201904-1073
OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。Apache Qpid是美国Apache软件基金会的一款面向对象的消息中间件。该产品是一个AMQP（高级消息队列协议）的实现，可以和符合AMQP协议的系统进行通信，并提供了C++、Python、Java、C#等编程语言的客户端库。
Apache Qpid Proton 0.9版本至0.27.0版本（使用OpenSSL1.1.0之前版本）中存在安全漏洞。攻击者可利用该漏洞实施中间人攻击。
solution:Upgrade apache qpid to a higher version than 0.27.0,and avoid the version [0.9,0.27.0]; Upgrade redhat jboss_amq_clients_2 to a higher version than -; Upgrade redhat openstack to a higher version than 13,14,and avoid the version 13,14; Upgrade redhat satellite to a higher version than 6.3,6.4,6.5,and avoid the version 6.3,6.4,6.5; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 6.7,7.2,7.3,7.4,7.5,7.6,and avoid the version 6.7,7.2,7.3,7.4,7.5,7.6; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 5.9,6.4,6.5,6.6,7.2,7.3,7.4,7.6,and avoid the version 5.9,6.4,6.5,6.6,7.2,7.3,7.4,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.2,7.3,7.4,7.6,and avoid the version 7.2,7.3,7.4,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0