Issued:

2011-10-24

Updated:

2011-10-24

RHBA-2011:1398 - qpid-cpp bug fix update

Synopsis

qpid-cpp bug fix update

Type/Severity

Bug Fix Advisory

Topic

Updated qpid-cpp packages that fix several bugs are now available for Red Hat Enterprise Linux 6.

Description

The qpid-cpp packages provide a message broker daemon that receives, stores and routes messages using the open AMQP messaging protocol along with run-time libraries for AMQP client applications developed using Qpid C++. Clients exchange messages with an AMQP message broker using the AMQP protocol.

This update fixes the following bugs:

• Due to a regression, a memory leak was introduced that prevented the broker from correctly releasing messages. Consequently, the broker's memory footprint grew indefinitely. A patch has been provided to address this issue, and the memory leak no longer occurs in the described scenario. (BZ#728586)

• After the upgrade of MRG Messaging from version 1.2 to version 1.3, the qpidd daemon terminated unexpectedly on some of the cluster nodes. With this update, the broker code has been fixed to handle all cases when a faulty client sends frames before completely opening the connection, thus fixing this bug. (BZ#734608)

• Previously, specifying an invalid IP address for a destination broker caused a repeatable file descriptor leak. A patch has been provided to address this issue, and the file descriptor leak no longer occurs in the described scenario. (BZ#732063)

• Prior to this update, when a large message (over 4KB) was sent from the python-qpid client to the broker, the connection became unresponsive and other clients were unable to connect to the broker. This bug has been fixed, and clients no longer hang in the described scenario. (BZ#733543)

• Under heavy load, the broker generated a large number of timer late/overrun warning messages. Though the messages themselves were usually inoffensive, the time to log them individually caused long (up to several seconds) delays and inflated log files. With this update, logging output for these messages has been restricted to the "--log-enabled=info" option, thus preventing this bug. (BZ#690107)

All users of qpid-cpp are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• qpid-cpp-server-ssl-0.10-8.el6_1.x86_64.rpm
• qpid-cpp-server-ssl-0.10-8.el6_1.i686.rpm
• qpid-cpp-debuginfo-0.10-8.el6_1.i686.rpm
• qpid-cpp-0.10-8.el6_1.src.rpm
• qpid-cpp-client-0.10-8.el6_1.i686.rpm
• qpid-cpp-server-0.10-8.el6_1.i686.rpm
• qpid-cpp-debuginfo-0.10-8.el6_1.x86_64.rpm
• qpid-cpp-client-0.10-8.el6_1.x86_64.rpm
• qpid-cpp-server-0.10-8.el6_1.x86_64.rpm
• qpid-cpp-client-ssl-0.10-8.el6_1.i686.rpm
• qpid-cpp-client-ssl-0.10-8.el6_1.x86_64.rpm

Fixes

(none)

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.