Details
-
New Feature
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
Description
Several CVE had been announced by the ActiveMQ PMC, namely:
- CVE-2021-26118: Flaw in ActiveMQ Artemis OpenWire support
- CVE-2021-26117: ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind
We do not use these features thus JAMES server is unaffected however updating these components seems like to be a good idea to me.