bugtraq - [ANNOUNCE] CVE-2014-3576 - Apache ActiveMQ vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <563CF679.40603@gmail.com>
Date: Fri, 6 Nov 2015 13:50:33 -0500
From: Timothy Bish <tabish121@...il.com>
To: dev@...ivemq.apache.org, users@...ivemq.apache.org, security@...che.org,
  oss-security@...ts.openwall.com, bugtraq@...urityfocus.com
Subject: [ANNOUNCE] CVE-2014-3576 - Apache ActiveMQ vulnerabilities

There following security vulnerability was reported against Apache
ActiveMQ 5.10.0 and older versions.

Please check the following document and see if you’re affected by the issue.

http://activemq.apache.org/security-advisories.data/CVE-2014-3576-announcement.txt

Apache ActiveMQ 5.11.0 and newer with appropriate fixes was released and
available for upgrade.

-- 
Tim Bish
RedHat Inc.
tim.bish@...hat.com | www.redhat.com