Version 5.15.4-2 of activemq is marked for autoremoval from testing on Thu 18 Oct 2018. It is affected by #907688. The removal of activemq will also cause the removal of (transitive) reverse dependency: uima-as. You should try to prevent the removal by fixing these RC bugs.
CVE-2018-11775: TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.
CVE-2018-11775: TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.
CVE-2018-11775: TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.
1 issue skipped by the security teams:
CVE-2017-15709: When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/a/activemq.png){kind=link}