[ANNOUNCE] CVE-2016-6810: ActiveMQ Web Console - Cross-Site Scripting

2016-12-09 Thread Christopher Shannon
The following security vulnerability was reported against Apache ActiveMQ 5.14.1 and older versions. Please check the following document and see if you’re affected by the issue. http://activemq.apache.org/security-advisories.data/CVE-2016-6810-announcement.txt Apache ActiveMQ 5.14.2 has been rel

[ANNOUNCE] Apache ActiveMQ 5.14.2 Released

2016-12-09 Thread Christopher Shannon
Hi everyone, The ActiveMQ team is pleased to announce that Apache ActiveMQ 5.14.2 has now been released and includes over 30 bug fixes and improvements. A list of issues resolved in this release is available here: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=1