-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 25 Oct 2024 10:58:56 -0300
Source: activemq
Architecture: source
Version: 5.16.1-1+deb11u1
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Santiago Ruano Rincón <santiagorr@riseup.net>
Closes: 1054909
Changes:
activemq (5.16.1-1+deb11u1) bullseye-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* CVE-2023-46604: The Java OpenWire protocol marshaller is vulnerable to
Remote Code Execution (Closes: #1054909)
* CVE-2022-41678: Potential arbitrary code execution via Jolokia
* Add d/salsa-ci.yml using lts-team bullseye recipe
Checksums-Sha1:
9f4cbb15cd9361eb87de7ee6a38e317495a231d8 2900 activemq_5.16.1-1+deb11u1.dsc
0c721998a736d026fbb0fbb1541682c1a91033d6 2789828 activemq_5.16.1.orig.tar.xz
26ed538c934b84230c5f1d20009709ee777cdcd6 20420 activemq_5.16.1-1+deb11u1.debian.tar.xz
638cb0f40daf0b295be097538afb4b916b12da73 16177 activemq_5.16.1-1+deb11u1_amd64.buildinfo
Checksums-Sha256:
eb2135def2180773409e60b7a9dff8e6704c094deac7fb271967d87f9f6b997e 2900 activemq_5.16.1-1+deb11u1.dsc
9d4adaf8cc0b96389ca3beae5e49479d44a0e9cd5e021b261f07578277ccefce 2789828 activemq_5.16.1.orig.tar.xz
79bc62fad673bb8614468bbcfa02f692c848c3aaa75efd3e6c20bb7d2ca4f3a4 20420 activemq_5.16.1-1+deb11u1.debian.tar.xz
2a4dda36f0c219d1a1e040d08ae1a0d81297f683d6f8768b4c3a1b9209807c43 16177 activemq_5.16.1-1+deb11u1_amd64.buildinfo
Files:
92e6f4d6f9f2538d4862e8d42fa34e8a 2900 java optional activemq_5.16.1-1+deb11u1.dsc
52d84aeae891e3f540b87cd3776b0aab 2789828 java optional activemq_5.16.1.orig.tar.xz
4994e9057b2a8b7a1736d9b8985892b6 20420 java optional activemq_5.16.1-1+deb11u1.debian.tar.xz
29b3a580c3d4e1eb01fbc98a963292ff 16177 java optional activemq_5.16.1-1+deb11u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iIwEARYIADQWIQR+lHTq7mkJOyB6t2Un3j1FEEiG7wUCZxu0sRYcc2FudGlhZ29y
ckByaXNldXAubmV0AAoJECfePUUQSIbvKMgBALp4EwqkJRptmdNNtl3i7edExoW+
ofyIXBB/xGauKF6BAP4mxnx5fXLVN5K+UCwDeYAivVpgDAaynpS6qt6jwMLGAA==
=i5VN
-----END PGP SIGNATURE-----
Attachment:
pgp0iPS4SgtxE.pgp
Description: PGP signature