CVE-2009-5006
The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in...
The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.
Exploit likelihood
What each source reports
NVD Score used
4.0
The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.
- Record
CVE-2009-5006- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.
- Record
CVE-2009-5006- Updated
- 2026-11-02
EUVDEUVD-2009-4968 No score
The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.
- Record
EUVD-2009-4968- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8wmw-6vpm-257g No score
The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in...
The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in the C++ Broker component in Apache Qpid before 0.6, as used in Red Hat Enterprise MRG before 1.3 and other products, allows remote authenticated users to cause a denial of service (NULL pointer dereference, daemon crash, and cluster outage) by attempting to modify the alternate of an exchange.
- Record
GHSA-8wmw-6vpm-257g- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
PyYAMLRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:3.08-5.el5 | 0:3.08-5.el5 |
PyYAML-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:3.08-5.el5 | 0:3.08-5.el5 |
classadsRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.0.8-1.el5 | 0:1.0.8-1.el5 |
classads-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.0.8-1.el5 | 0:1.0.8-1.el5 |
classads-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.0.8-1.el5 | 0:1.0.8-1.el5 |
classads-staticRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.0.8-1.el5 | 0:1.0.8-1.el5 |
condorRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:7.4.4-0.16.el5 | 0:7.4.4-0.16.el5 |
condor-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:7.4.4-0.16.el5 | 0:7.4.4-0.16.el5 |
condor-ec2-enhancedRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.1-1.el5 | 0:1.1-1.el5 |
condor-ec2-enhanced-hooksRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.1-1.el5 | 0:1.1-1.el5 |
Show 104 moreShow less
| Package | Affected | Fixed |
|---|---|---|
condor-job-hooksRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.4-5.el5 | 0:1.4-5.el5 |
condor-kbddRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:7.4.4-0.16.el5 | 0:7.4.4-0.16.el5 |
condor-low-latencyRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.1-0.2.el5 | 0:1.1-0.2.el5 |
condor-qmfRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:7.4.4-0.16.el5 | 0:7.4.4-0.16.el5 |
condor-vm-gahpRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:7.4.4-0.16.el5 | 0:7.4.4-0.16.el5 |
condor-wallabyRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:3.6-6.el5 | 0:3.6-6.el5 |
condor-wallaby-base-dbRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.4-5.el5 | 0:1.4-5.el5 |
condor-wallaby-clientRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:3.6-6.el5 | 0:3.6-6.el5 |
condor-wallaby-toolsRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:3.6-6.el5 | 0:3.6-6.el5 |
libyamlRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.1.2-4.el5 | 0:0.1.2-4.el5 |
libyaml-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.1.2-4.el5 | 0:0.1.2-4.el5 |
libyaml-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.1.2-4.el5 | 0:0.1.2-4.el5 |
mrg-grid-docsRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.3-1.el5 | 0:1.3-1.el5 |
mrg-releaseRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.3-2.el5 | 0:1.3-2.el5 |
python-condorec2eRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.1-1.el5 | 0:1.1-1.el5 |
python-condorutilsRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.4-5.el5 | 0:1.4-5.el5 |
python-wallabyclientRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:3.6-6.el5 | 0:3.6-6.el5 |
ruby-rhubarbRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.2.7-1.el5 | 0:0.2.7-1.el5 |
ruby-spqrRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.3.2-1.el5 | 0:0.3.2-1.el5 |
ruby-sqlite3Red Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.2.4-1.el5 | 0:1.2.4-1.el5 |
ruby-sqlite3-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:1.2.4-1.el5 | 0:1.2.4-1.el5 |
ruby-wallabyRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.9.18-2.el5 | 0:0.9.18-2.el5 |
spqr-genRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.3.2-1.el5 | 0:0.3.2-1.el5 |
wallabyRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.9.18-2.el5 | 0:0.9.18-2.el5 |
wallaby-utilsRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.9.18-2.el5 | 0:0.9.18-2.el5 |
cuminRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.1.4369-1.el5 | 0:0.1.4369-1.el5 |
python-psycopg2Red Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:2.0.14-2.el5 | 0:2.0.14-2.el5 |
python-psycopg2-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:2.0.14-2.el5 | 0:2.0.14-2.el5 |
python-psycopg2-docRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:2.0.14-2.el5 | 0:2.0.14-2.el5 |
python-qmfRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-13.el5 | 0:0.7.946106-13.el5 |
python-qpidRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-14.el5 | 0:0.7.946106-14.el5 |
python-saslwrapperRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.1.934605-2.el5 | 0:0.1.934605-2.el5 |
qmfRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qmf-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-clientRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-client-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-client-devel-docsRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-client-rdmaRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-client-sslRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-mrgRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-mrg-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-serverRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-server-clusterRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-server-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-server-rdmaRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-server-sslRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-server-storeRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-cpp-server-xmlRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
qpid-javaRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-11.el5 | 0:0.7.946106-11.el5 |
qpid-java-clientRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-11.el5 | 0:0.7.946106-11.el5 |
qpid-java-commonRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-11.el5 | 0:0.7.946106-11.el5 |
qpid-java-exampleRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-11.el5 | 0:0.7.946106-11.el5 |
qpid-testsRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-1.el5 | 0:0.7.946106-1.el5 |
qpid-toolsRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-11.el5 | 0:0.7.946106-11.el5 |
rh-qpid-cpp-testsRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
rhm-docsRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-8.el5 | 0:0.7.946106-8.el5 |
ruby-qmfRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el5 | 0:0.7.946106-17.el5 |
ruby-qpidRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.946106-2.el5 | 0:0.7.946106-2.el5 |
ruby-saslwrapperRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.1.934605-2.el5 | 0:0.1.934605-2.el5 |
saslwrapperRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.1.934605-2.el5 | 0:0.1.934605-2.el5 |
saslwrapper-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.1.934605-2.el5 | 0:0.1.934605-2.el5 |
saslwrapper-develRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.1.934605-2.el5 | 0:0.1.934605-2.el5 |
sesameRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.4297-2.el5 | 0:0.7.4297-2.el5 |
sesame-debuginfoRed Hat:enterprise_mrg:1::el5 From an advisory covering 2 CVEs |
before 0:0.7.4297-2.el5 | 0:0.7.4297-2.el5 |
classadsRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:1.0.8-1.el4 | 0:1.0.8-1.el4 |
classads-debuginfoRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:1.0.8-1.el4 | 0:1.0.8-1.el4 |
classads-develRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:1.0.8-1.el4 | 0:1.0.8-1.el4 |
classads-staticRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:1.0.8-1.el4 | 0:1.0.8-1.el4 |
condorRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:7.4.4-0.16.el4 | 0:7.4.4-0.16.el4 |
condor-debuginfoRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:7.4.4-0.16.el4 | 0:7.4.4-0.16.el4 |
condor-job-hooksRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:1.4-5.el4 | 0:1.4-5.el4 |
condor-kbddRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:7.4.4-0.16.el4 | 0:7.4.4-0.16.el4 |
condor-low-latencyRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:1.1-0.2.el4 | 0:1.1-0.2.el4 |
condor-qmfRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:7.4.4-0.16.el4 | 0:7.4.4-0.16.el4 |
condor-wallabyRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:3.6-6.el4 | 0:3.6-6.el4 |
condor-wallaby-clientRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:3.6-6.el4 | 0:3.6-6.el4 |
mrg-grid-docsRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:1.3-1.el4 | 0:1.3-1.el4 |
mrg-releaseRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:1.3-2.el4 | 0:1.3-2.el4 |
python-condorutilsRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:1.4-5.el4 | 0:1.4-5.el4 |
python-qmfRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-13.el4 | 0:0.7.946106-13.el4 |
python-qpidRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-14.el4 | 0:0.7.946106-14.el4 |
qmfRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qmf-develRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-cpp-clientRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-cpp-client-develRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-cpp-client-devel-docsRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-cpp-client-sslRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-cpp-mrgRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-cpp-mrg-debuginfoRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-cpp-serverRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-cpp-server-develRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-cpp-server-sslRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-cpp-server-storeRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-cpp-server-xmlRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
qpid-javaRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-11.el4 | 0:0.7.946106-11.el4 |
qpid-java-clientRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-11.el4 | 0:0.7.946106-11.el4 |
qpid-java-commonRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-11.el4 | 0:0.7.946106-11.el4 |
qpid-java-exampleRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-11.el4 | 0:0.7.946106-11.el4 |
qpid-testsRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-1.el4 | 0:0.7.946106-1.el4 |
qpid-toolsRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-11.el4 | 0:0.7.946106-11.el4 |
rh-qpid-cpp-testsRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-17.el4 | 0:0.7.946106-17.el4 |
rhm-docsRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.946106-8.el4 | 0:0.7.946106-8.el4 |
sesameRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.4297-3.el4 | 0:0.7.4297-3.el4 |
sesame-debuginfoRed Hat:enterprise_mrg:1.0::el4 From an advisory covering 2 CVEs |
before 0:0.7.4297-3.el4 | 0:0.7.4297-3.el4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-5006 is a medium vulnerability (CVSS 4.0) in Apache Qpid, published October 18, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.09%, the 90th percentile. No source names a fixed version.
References
rhn.redhat.com/errata/RHSA-2010-0774.html
svn.apache.org/viewvc?revision=811188&view=revision
vupen.com/english/advisories/2010/2684
issues.apache.org/jira/browse/QPID-2080
bugzilla.redhat.com/show_bug.cgi?id=642377
secunia.com/advisories/41812
Show 194 moreShow less
secunia.com/advisories/41710
rhn.redhat.com/errata/RHSA-2010-0773.html
nvd.nist.gov/vuln/detail/CVE-2009-5006
github.com/advisories/GHSA-8wmw-6vpm-257g
access.redhat.com/errata/RHSA-2010:0773
access.redhat.com/security/updates/classification
docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/1/html/Technical_Notes/index.html
bugzilla.redhat.com/show_bug.cgi?id=445749
bugzilla.redhat.com/show_bug.cgi?id=452546
bugzilla.redhat.com/show_bug.cgi?id=455318
bugzilla.redhat.com/show_bug.cgi?id=456482
bugzilla.redhat.com/show_bug.cgi?id=458344
bugzilla.redhat.com/show_bug.cgi?id=462461
bugzilla.redhat.com/show_bug.cgi?id=469919
bugzilla.redhat.com/show_bug.cgi?id=470080
bugzilla.redhat.com/show_bug.cgi?id=471054
bugzilla.redhat.com/show_bug.cgi?id=471286
bugzilla.redhat.com/show_bug.cgi?id=471315
bugzilla.redhat.com/show_bug.cgi?id=471326
bugzilla.redhat.com/show_bug.cgi?id=471632
bugzilla.redhat.com/show_bug.cgi?id=479031
bugzilla.redhat.com/show_bug.cgi?id=479326
bugzilla.redhat.com/show_bug.cgi?id=482944
bugzilla.redhat.com/show_bug.cgi?id=483666
bugzilla.redhat.com/show_bug.cgi?id=483753
bugzilla.redhat.com/show_bug.cgi?id=484048
bugzilla.redhat.com/show_bug.cgi?id=485091
bugzilla.redhat.com/show_bug.cgi?id=485429
bugzilla.redhat.com/show_bug.cgi?id=486595
bugzilla.redhat.com/show_bug.cgi?id=486779
bugzilla.redhat.com/show_bug.cgi?id=487023
bugzilla.redhat.com/show_bug.cgi?id=488942
bugzilla.redhat.com/show_bug.cgi?id=489315
bugzilla.redhat.com/show_bug.cgi?id=489537
bugzilla.redhat.com/show_bug.cgi?id=489540
bugzilla.redhat.com/show_bug.cgi?id=490170
bugzilla.redhat.com/show_bug.cgi?id=490855
bugzilla.redhat.com/show_bug.cgi?id=491203
bugzilla.redhat.com/show_bug.cgi?id=491305
bugzilla.redhat.com/show_bug.cgi?id=491313
bugzilla.redhat.com/show_bug.cgi?id=492334
bugzilla.redhat.com/show_bug.cgi?id=493710
bugzilla.redhat.com/show_bug.cgi?id=494393
bugzilla.redhat.com/show_bug.cgi?id=494399
bugzilla.redhat.com/show_bug.cgi?id=494651
bugzilla.redhat.com/show_bug.cgi?id=495718
bugzilla.redhat.com/show_bug.cgi?id=497747
bugzilla.redhat.com/show_bug.cgi?id=497748
bugzilla.redhat.com/show_bug.cgi?id=498056
bugzilla.redhat.com/show_bug.cgi?id=498247
bugzilla.redhat.com/show_bug.cgi?id=500712
bugzilla.redhat.com/show_bug.cgi?id=500779
bugzilla.redhat.com/show_bug.cgi?id=501015
bugzilla.redhat.com/show_bug.cgi?id=501305
bugzilla.redhat.com/show_bug.cgi?id=501749
bugzilla.redhat.com/show_bug.cgi?id=504000
bugzilla.redhat.com/show_bug.cgi?id=504325
bugzilla.redhat.com/show_bug.cgi?id=504691
bugzilla.redhat.com/show_bug.cgi?id=505287
bugzilla.redhat.com/show_bug.cgi?id=505314
bugzilla.redhat.com/show_bug.cgi?id=505923
bugzilla.redhat.com/show_bug.cgi?id=506420
bugzilla.redhat.com/show_bug.cgi?id=506553
bugzilla.redhat.com/show_bug.cgi?id=506556
bugzilla.redhat.com/show_bug.cgi?id=506698
bugzilla.redhat.com/show_bug.cgi?id=507363
bugzilla.redhat.com/show_bug.cgi?id=507413
bugzilla.redhat.com/show_bug.cgi?id=507421
bugzilla.redhat.com/show_bug.cgi?id=507538
bugzilla.redhat.com/show_bug.cgi?id=507586
bugzilla.redhat.com/show_bug.cgi?id=508137
bugzilla.redhat.com/show_bug.cgi?id=508144
bugzilla.redhat.com/show_bug.cgi?id=508675
bugzilla.redhat.com/show_bug.cgi?id=508959
bugzilla.redhat.com/show_bug.cgi?id=509395
bugzilla.redhat.com/show_bug.cgi?id=509437
bugzilla.redhat.com/show_bug.cgi?id=509449
bugzilla.redhat.com/show_bug.cgi?id=509454
bugzilla.redhat.com/show_bug.cgi?id=509800
bugzilla.redhat.com/show_bug.cgi?id=509892
bugzilla.redhat.com/show_bug.cgi?id=510241
bugzilla.redhat.com/show_bug.cgi?id=510475
bugzilla.redhat.com/show_bug.cgi?id=510583
bugzilla.redhat.com/show_bug.cgi?id=510747
bugzilla.redhat.com/show_bug.cgi?id=511066
bugzilla.redhat.com/show_bug.cgi?id=511292
bugzilla.redhat.com/show_bug.cgi?id=513426
bugzilla.redhat.com/show_bug.cgi?id=513641
bugzilla.redhat.com/show_bug.cgi?id=514054
bugzilla.redhat.com/show_bug.cgi?id=514751
bugzilla.redhat.com/show_bug.cgi?id=515513
bugzilla.redhat.com/show_bug.cgi?id=517836
bugzilla.redhat.com/show_bug.cgi?id=518291
bugzilla.redhat.com/show_bug.cgi?id=518394
bugzilla.redhat.com/show_bug.cgi?id=518872
bugzilla.redhat.com/show_bug.cgi?id=519183
bugzilla.redhat.com/show_bug.cgi?id=519476
bugzilla.redhat.com/show_bug.cgi?id=519505
bugzilla.redhat.com/show_bug.cgi?id=520600
bugzilla.redhat.com/show_bug.cgi?id=522267
bugzilla.redhat.com/show_bug.cgi?id=526299
bugzilla.redhat.com/show_bug.cgi?id=526680
bugzilla.redhat.com/show_bug.cgi?id=527233
bugzilla.redhat.com/show_bug.cgi?id=529670
bugzilla.redhat.com/show_bug.cgi?id=530594
bugzilla.redhat.com/show_bug.cgi?id=531561
bugzilla.redhat.com/show_bug.cgi?id=531833
bugzilla.redhat.com/show_bug.cgi?id=531837
bugzilla.redhat.com/show_bug.cgi?id=531842
bugzilla.redhat.com/show_bug.cgi?id=533045
bugzilla.redhat.com/show_bug.cgi?id=533173
bugzilla.redhat.com/show_bug.cgi?id=534008
bugzilla.redhat.com/show_bug.cgi?id=537232
bugzilla.redhat.com/show_bug.cgi?id=537481
bugzilla.redhat.com/show_bug.cgi?id=538188
bugzilla.redhat.com/show_bug.cgi?id=540545
bugzilla.redhat.com/show_bug.cgi?id=541927
bugzilla.redhat.com/show_bug.cgi?id=543021
bugzilla.redhat.com/show_bug.cgi?id=543524
bugzilla.redhat.com/show_bug.cgi?id=543560
bugzilla.redhat.com/show_bug.cgi?id=544092
bugzilla.redhat.com/show_bug.cgi?id=544306
bugzilla.redhat.com/show_bug.cgi?id=545436
bugzilla.redhat.com/show_bug.cgi?id=546736
bugzilla.redhat.com/show_bug.cgi?id=546770
bugzilla.redhat.com/show_bug.cgi?id=547295
bugzilla.redhat.com/show_bug.cgi?id=547397
bugzilla.redhat.com/show_bug.cgi?id=547769
bugzilla.redhat.com/show_bug.cgi?id=548090
bugzilla.redhat.com/show_bug.cgi?id=548137
bugzilla.redhat.com/show_bug.cgi?id=548493
bugzilla.redhat.com/show_bug.cgi?id=549389
bugzilla.redhat.com/show_bug.cgi?id=549432
bugzilla.redhat.com/show_bug.cgi?id=549443
bugzilla.redhat.com/show_bug.cgi?id=549956
bugzilla.redhat.com/show_bug.cgi?id=552330
bugzilla.redhat.com/show_bug.cgi?id=552407
bugzilla.redhat.com/show_bug.cgi?id=554980
bugzilla.redhat.com/show_bug.cgi?id=555716
bugzilla.redhat.com/show_bug.cgi?id=556351
bugzilla.redhat.com/show_bug.cgi?id=557159
bugzilla.redhat.com/show_bug.cgi?id=557896
bugzilla.redhat.com/show_bug.cgi?id=558526
bugzilla.redhat.com/show_bug.cgi?id=558864
bugzilla.redhat.com/show_bug.cgi?id=558968
bugzilla.redhat.com/show_bug.cgi?id=559014
bugzilla.redhat.com/show_bug.cgi?id=559071
bugzilla.redhat.com/show_bug.cgi?id=559625
bugzilla.redhat.com/show_bug.cgi?id=560005
bugzilla.redhat.com/show_bug.cgi?id=561955
bugzilla.redhat.com/show_bug.cgi?id=561958
bugzilla.redhat.com/show_bug.cgi?id=565618
bugzilla.redhat.com/show_bug.cgi?id=566825
bugzilla.redhat.com/show_bug.cgi?id=568502
bugzilla.redhat.com/show_bug.cgi?id=568661
bugzilla.redhat.com/show_bug.cgi?id=568718
bugzilla.redhat.com/show_bug.cgi?id=568838
bugzilla.redhat.com/show_bug.cgi?id=568863
bugzilla.redhat.com/show_bug.cgi?id=570756
bugzilla.redhat.com/show_bug.cgi?id=572574
bugzilla.redhat.com/show_bug.cgi?id=572668
bugzilla.redhat.com/show_bug.cgi?id=575147
bugzilla.redhat.com/show_bug.cgi?id=575150
bugzilla.redhat.com/show_bug.cgi?id=575177
bugzilla.redhat.com/show_bug.cgi?id=575748
bugzilla.redhat.com/show_bug.cgi?id=575777
bugzilla.redhat.com/show_bug.cgi?id=575784
bugzilla.redhat.com/show_bug.cgi?id=576693
bugzilla.redhat.com/show_bug.cgi?id=578216
bugzilla.redhat.com/show_bug.cgi?id=578600
bugzilla.redhat.com/show_bug.cgi?id=579681
bugzilla.redhat.com/show_bug.cgi?id=582366
bugzilla.redhat.com/show_bug.cgi?id=583131
bugzilla.redhat.com/show_bug.cgi?id=583526
bugzilla.redhat.com/show_bug.cgi?id=584089
bugzilla.redhat.com/show_bug.cgi?id=591292
bugzilla.redhat.com/show_bug.cgi?id=592861
bugzilla.redhat.com/show_bug.cgi?id=597362
bugzilla.redhat.com/show_bug.cgi?id=601828
bugzilla.redhat.com/show_bug.cgi?id=603201
bugzilla.redhat.com/show_bug.cgi?id=603839
bugzilla.redhat.com/show_bug.cgi?id=605311
bugzilla.redhat.com/show_bug.cgi?id=606824
bugzilla.redhat.com/show_bug.cgi?id=614993
bugzilla.redhat.com/show_bug.cgi?id=615313
bugzilla.redhat.com/show_bug.cgi?id=615492
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0773.json
access.redhat.com/security/cve/CVE-2009-5005
cve.org/CVERecord?id=CVE-2009-5005
nvd.nist.gov/vuln/detail/CVE-2009-5005
access.redhat.com/security/cve/CVE-2009-5006
cve.org/CVERecord?id=CVE-2009-5006
access.redhat.com/errata/RHSA-2010:0774
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0774.json
Left out here: 12 references. The JSON record has them.