Benoit Tellier created JAMES-3496:
-------------------------------------

             Summary: Update ActiveMQ and Artemis
                 Key: JAMES-3496
                 URL: https://issues.apache.org/jira/browse/JAMES-3496
             Project: James Server
          Issue Type: New Feature
          Components: Queue
            Reporter: Benoit Tellier


Several CVE had been announced by the ActiveMQ PMC, namely:

 - CVE-2021-26118: Flaw in ActiveMQ Artemis OpenWire support
 - CVE-2021-26117: ActiveMQ: LDAP-Authentication does not verify passwords on 
servers with anonymous bind

We do not use these features thus JAMES server is unaffected however updating 
these components seems like to be a good idea to me.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to