oss-sec mailing list archives

[ANNOUNCE] CVE-2014-3600, CVE-2014-3612 and CVE-2014-8110 - Apache ActiveMQ vulnerabilities


From: Dejan Bosanac <dejan () nighttale net>
Date: Thu, 5 Feb 2015 15:32:00 +0100

There have been a several security vulnerabilities reported against Apache
ActiveMQ 5.10.0 and older versions.

Please check the following documents and see if you’re affected by them

http://activemq.apache.org/security-advisories.data/CVE-2014-3600-announcement.txt
http://activemq.apache.org/security-advisories.data/CVE-2014-3612-announcement.txt
http://activemq.apache.org/security-advisories.data/CVE-2014-8110-announcement.txt

Apache ActiveMQ 5.10.1 and 5.11.0 with appropriate fixes are released and
available for upgrade

Regards
--
Dejan Bosanac
----------------------
Red Hat, Inc.
dbosanac () redhat com
Twitter: @dejanb
Blog: http://sensatic.net
ActiveMQ in Action: http://www.manning.com/snyder/

Current thread: