Re: Active MQ All Fix for CVE-2021-44228, CVSS 10.0 (Critical)

2022-01-18 Thread Justin Bertram
> when we download the Active Mq from below Maven link the jar name is " ActiveMQ all", however I could not found this from Active MQ website. All Maven artifacts are built from the source code. You can find links to all the ActiveMQ source code repositories on the website [1]. You need to look in

RE: Active MQ All Fix for CVE-2021-44228, CVSS 10.0 (Critical)

2022-01-18 Thread Deepti Sharma S
Hello Justin, The question is , when we download the Active Mq from below Maven link the jar name is " ActiveMQ all", however I could not found this from Active MQ website. I might miss the release date for 5.17, it would be helpful, if you could confirm the release date for the same. Regards

Re: Active MQ All Fix for CVE-2021-44228, CVSS 10.0 (Critical)

2022-01-18 Thread Justin Bertram
> Does Active MQ all (// https://mvnrepository.com/artifact/org.apache.activemq/activemq-all implementation 'org.apache.activemq:activemq-all:5.16.3') is same as Active MQ Classic? I don't understand the question. What exactly are you asking here? > When we are expecting the Active MQ 5.17.x vers

RE: Active MQ All Fix for CVE-2021-44228, CVSS 10.0 (Critical)

2022-01-18 Thread Deepti Sharma S
Hello All, 2 questions: Does Active MQ all (// https://mvnrepository.com/artifact/org.apache.activemq/activemq-all implementation 'org.apache.activemq:activemq-all:5.16.3') is same as Active MQ Classic? When we are expecting the Active MQ 5.17.x version with Log4J 2.17.x? Regards, Deepti Shar