Register | Log in

activemq

Java message broker - server

Choose email to subscribe with

general

source: activemq (main)
version: 5.15.8-2
maintainer: Debian Java Maintainers (archive) [DMD]
uploaders: Damien Raude-Morvan [DMD]
arch: all
std-ver: 4.3.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 5.6.0+dfsg1-4+deb8u3
old-sec: 5.6.0+dfsg1-4+deb8u2
stable: 5.14.3-3
testing: 5.15.8-2
unstable: 5.15.8-2

versioned links

5.6.0+dfsg1-4+deb8u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.6.0+dfsg1-4+deb8u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.14.3-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.15.8-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

activemq
libactivemq-java

action needed

A new upstream version is available: 5.15.9 high

A new upstream version 5.15.9 is available, you should consider packaging it.

Created: 2019-03-20 Last update: 2019-04-22 01:51

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2019-0222: In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

Please fix it.

Created: 2019-03-29 Last update: 2019-04-03 05:34

1 security issue in buster high

There is 1 open security issue in buster.

1 important issue:

CVE-2019-0222: In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

Please fix it.

Created: 2019-03-29 Last update: 2019-04-03 05:34

3 security issues in stretch high

There are 3 open security issues in stretch.

1 important issue:

CVE-2019-0222: In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

2 issues skipped by the security teams:

CVE-2018-11775: TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.
CVE-2017-15709: When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.

Please fix them.

Created: 2018-02-14 Last update: 2019-04-03 05:34

Depends on packages which need a new maintainer normal

The packages that activemq depends on which need a new maintainer are:

javacc-maven-plugin (#922602)
- Build-Depends: libjavacc-maven-plugin-java
lsb (#924519)
- Depends: lsb-base

Created: 2019-02-18 Last update: 2019-04-22 01:45

lintian reports 4 warnings normal

Lintian reports 4 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2018-04-08 Last update: 2018-09-13 08:00

1 ignored security issue in jessie low

There is 1 open security issue in jessie.

1 issue skipped by the security teams:

CVE-2018-11775: TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.

Please fix it.

Created: 2018-09-10 Last update: 2019-04-03 05:34

news

[2019-01-03] activemq 5.15.8-2 MIGRATED to testing (Debian testing watch)
[2018-12-28] Accepted activemq 5.15.8-2 (source) into unstable (Markus Koschany)
[2018-11-25] activemq 5.15.8-1 MIGRATED to testing (Debian testing watch)
[2018-11-19] Accepted activemq 5.15.8-1 (source) into unstable (Markus Koschany)
[2018-11-08] activemq 5.15.7-1 MIGRATED to testing (Debian testing watch)
[2018-11-03] Accepted activemq 5.15.7-1 (source) into unstable (Markus Koschany)
[2018-09-24] activemq 5.15.6-1 MIGRATED to testing (Debian testing watch)
[2018-09-18] Accepted activemq 5.15.6-1 (source) into unstable (Markus Koschany)
[2018-06-18] activemq 5.15.4-2 MIGRATED to testing (Debian testing watch)
[2018-06-12] Accepted activemq 5.15.4-2 (source) into unstable (Markus Koschany)
[2018-06-10] activemq 5.15.4-1 MIGRATED to testing (Debian testing watch)
[2018-06-04] Accepted activemq 5.15.4-1 (source) into unstable (Markus Koschany)
[2018-04-29] activemq 5.15.3-2 MIGRATED to testing (Debian testing watch)
[2018-04-24] Accepted activemq 5.15.3-2 (source) into unstable (Markus Koschany)
[2018-03-12] activemq 5.15.3-1 MIGRATED to testing (Debian testing watch)
[2018-03-06] Accepted activemq 5.15.3-1 (source) into unstable (Markus Koschany)
[2017-12-17] activemq 5.15.2-2 MIGRATED to testing (Debian testing watch)
[2017-12-12] Accepted activemq 5.15.2-2 (source) into unstable (Emmanuel Bourg)
[2017-12-12] Accepted activemq 5.15.2-1 (source) into unstable (Emmanuel Bourg)
[2017-10-15] activemq 5.14.5-3 MIGRATED to testing (Debian testing watch)
[2017-09-23] activemq REMOVED from testing (Debian testing watch)
[2017-08-26] activemq 5.14.5-3 MIGRATED to testing (Debian testing watch)
[2017-08-21] Accepted activemq 5.14.5-3 (source all) into unstable (tony mancill)
[2017-06-29] activemq 5.14.5-2 MIGRATED to testing (Debian testing watch)
[2017-06-22] Accepted activemq 5.14.5-2 (source) into unstable (Markus Koschany)
[2017-05-20] Accepted activemq 5.14.5-1 (source) into experimental (Markus Koschany)
[2017-04-28] Accepted activemq 5.6.0+dfsg1-4+deb8u3 (source all) into proposed-updates->stable-new, proposed-updates (Markus Koschany)
[2017-04-24] Accepted activemq 5.6.0+dfsg-1+deb7u3 (source all) into oldstable (Markus Koschany)
[2017-04-24] activemq 5.14.3-3 MIGRATED to testing (Debian testing watch)
[2017-04-21] Accepted activemq 5.14.3-3 (source) into unstable (Markus Koschany)

1
2

bugs [bug history graph]

all: 4
RC: 0
I&N: 4
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 4)
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.15.8-2
2 bugs

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing