UbuntuUpdates.org

Package "libactivemq-java"

Name: libactivemq-java

Description:

Java message broker core libraries
Latest version: 5.16.1-1ubuntu0.1
Release: jammy (22.04)
Level: security
Repository: universe
Head package: activemq
Homepage: http://activemq.apache.org

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libactivemq-java"

All arch deb package
APT INSTALL

Other versions of "libactivemq-java" in Jammy

Repository Area Version
base universe 5.16.1-1
updates universe 5.16.1-1ubuntu0.1

Changelog

Version: 5.16.1-1ubuntu0.1 2024-12-04 18:07:00 UTC

  activemq (5.16.1-1ubuntu0.1) jammy-security; urgency=medium

  * Merge from Debian
  * SECURITY UPDATE: Remote Code Execution
    - 0001-AMQ-9201-Update-Jolokia-default-access-configuration.patch:
      AMQ-9201 - Update Jolokia default access configuration
    - 0001-AMQ-9370-Openwire-marshaller-should-validate-Throwab.patch:
      AMQ-9370 - Openwire marshaller should validate Throwable class type
    - CVE-2022-41678
    - CVE-2023-46604
  * mising-dependency-in-stomp-pom.patch: backported from noble.
    Added for a missing dependency that caused FTBFS on jammy.

 -- Noam Nedelec-Salmon <email address hidden> Mon, 02 Dec 2024 15:27:16 +0100
CVE-2022-41678 Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution.  In details, in ActiveMQ configurations, jetty allows
CVE-2023-46604 The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to


About   -   Send Feedback to @ubuntu_updates