This is the first report I've heard of such an issue. I don't believe anyone is working on a solution.
I think having both implementations in the same application is likely quite rare so I doubt this was on anybody's radar as a potential problem. Justin On Tue, Oct 28, 2025 at 11:43 AM Florian Leeber <[email protected]> wrote: > Hello All, > > we are building a software test application in C# that currently > utilizes both Apache.NMS.ActiveMQ and Apache.NMS.AMQP Nuget packages, > which in turn rely on the Apache.NMS package. > > As published on Oct 16th there is now a CVE that basically demands > upgrade of AMQP to 2.4.0, which bumps Apache.NMS to 2.2.0 - > unfortunately that breaks ActiveMQ since it cannot handle interface > changes introduced there. It can only work with version 2.0.0 despite > specifying >=2.0.0 in its version constraints. > > We need to deliver patches to our customers but are entirely blocked > now. Is there anyone facing the same issue, and do you guys know if devs > are already working here on a solution? > > Thanks and BR Florian > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > For further information, visit: https://activemq.apache.org/contact > > >
