[
https://issues.apache.org/jira/browse/TOMEE-4597?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18073844#comment-18073844
]
RAJU THANNEERU commented on TOMEE-4597:
---------------------------------------
Also few more highs in activemq-broker and activemq-client jars.
CVE-2026-33227 4.3 medium fixed in 6.2.2, 5.19.3 2026-04-08 20:21:36
+0000 UTC org.apache.activemq_activemq-broker_6.2.0 this image
/usr/local/tomee/lib/activemq-broker-6.2.0.jar
CVE-2026-34197 8.8 high fixed in 6.2.3, 5.19.5 2026-04-13 23:51:56
+0000 UTC org.apache.activemq_activemq-broker_6.2.0 this image
/usr/local/tomee/lib/activemq-broker-6.2.0.jar
CVE-2026-39304 7.5 high fixed in 6.2.4, 5.19.4 2026-04-11 06:02:11
+0000 UTC org.apache.activemq_activemq-broker_6.2.0 this image
/usr/local/tomee/lib/activemq-broker-6.2.0.jar
CVE-2025-66168 8.8 high fixed in 6.2.1, 5.19.2 2026-03-05 22:05:10
+0000 UTC org.apache.activemq_activemq-client_6.2.0 this image
/usr/local/tomee/lib/activemq-client-6.2.0.jar
CVE-2026-33227 4.3 medium fixed in 6.2.2, 5.19.3 2026-04-08 20:21:36
+0000 UTC org.apache.activemq_activemq-client_6.2.0 this image
/usr/local/tomee/lib/activemq-client-6.2.0.jar
CVE-2026-39304 7.5 high fixed in 6.2.4, 5.19.4 2026-04-11 06:02:11
+0000 UTC org.apache.activemq_activemq-client_6.2.0 this image
/usr/local/tomee/lib/activemq-client-6.2.0.jar
GHSA-72hv-8253-57qq 6.9 medium fixed in 2.21.1, 2.18.6 2026-02-28
07:12:40 +0000 UTC com.fasterxml.jackson.core_jackson-core_2.21.0 this image
/usr/local/tomee/lib/jackson-core-2.21.0.jar
> Tomcat 10.1.54
> --------------
>
> Key: TOMEE-4597
> URL: https://issues.apache.org/jira/browse/TOMEE-4597
> Project: TomEE
> Issue Type: Dependency upgrade
> Reporter: Markus Jung
> Assignee: Markus Jung
> Priority: Major
> Fix For: 10.1.5
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
