[
https://issues.apache.org/jira/browse/AMQ-8246?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jean-Baptiste Onofré resolved AMQ-8246.
---------------------------------------
Fix Version/s: (was: 6.2.0)
(was: 6.1.7)
Resolution: Not A Problem
I double checked and I confirm ActiveMQ 5.16.1 includes the fix for the CVE:
https://github.com/apache/activemq/commit/c9f68f4
> CVE-2021-26117 still exists on 5.16.1
> --------------------------------------
>
> Key: AMQ-8246
> URL: https://issues.apache.org/jira/browse/AMQ-8246
> Project: ActiveMQ Classic
> Issue Type: Bug
> Reporter: Ashwini Kote Basavaraj
> Assignee: Jean-Baptiste Onofré
> Priority: Critical
> Attachments: MSR-AMQ.png
>
>
> From the link from apache
> [https://activemq.apache.org/security-advisories.data/CVE-2021-26117-announcement.txt,]
> LDAP related CVE-2021-26117 should be fixed on version 5.16.1.
> We upgraded activemq in our jar file to 5.16.1 and the issue still persists.
> Could you please help me understand why we are seeing bug on 5.16.1
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact