tocsin

Debian/activemq: critical 9.8

The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run

Action: Upgrade activemq to 5.17.2+dfsg-2+deb12u1 or later.

Affected

introducedfixedlast affected
05.17.2+dfsg-2+deb12u1-

Fixed versions

5.17.2+dfsg-2+deb12u1

Sources

published · modified · JSON