You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@activemq.apache.org by "Casey A. Owen via users" <us...@activemq.apache.org> on 2026/03/04 20:32:20 UTC

RE: **External Email** Re: Apache ActiveMQ: CVE-2025-66168 / CVE-2025-27533

Thanks, Chris!

Casey Owen | Sr Applications Analyst | 870-476-6334
Southwest Power Pool | SPP.org<https://www.spp.org/> | twitter.com/SPPorg<http://twitter.com/SPPorg> | facebook.com/SouthwestPowerPool<http://www.facebook.com/SouthwestPowerPool>
Leading our industry to a brighter future: delivering the best energy value.

From: Christopher Shannon <ch...@gmail.com>
Sent: Tuesday, March 3, 2026 6:50 PM
To: users@activemq.apache.org
Cc: announce@apache.org; dev@activemq.apache.org; Casey A. Owen <co...@spp.org>
Subject: **External Email** Re: Apache ActiveMQ: CVE-2025-66168 / CVE-2025-27533

STOP! This isNOT an SPP email. Be very cautious of any links or attachments unless you recognize this sender and are exp͏​​‌͏
[External email]<https://summary.us1.defend.egress.com/v3/summary?ref=email&crId=69a781c8da34e623e6465b1c&lang=en>
External email <https://summary.us1.defend.egress.com/v3/summary?ref=email&crId=69a781c8da34e623e6465b1c&lang=en>
[External email]<https://summary.us1.defend.egress.com/v3/summary?ref=email&crId=69a781c8da34e623e6465b1c&lang=en>

STOP! This is NOT an SPP email.
Be very cautious of any links or attachments unless you recognize this sender and are expecting this email.
Please click the "Report Phish" button if you are unsure about this email.
I just pushed the missing CVE notices to the website, all of the 2025 notices are now there.

Chris

On Tue, Mar 3, 2026 at 4:55 PM Jean-Baptiste Onofré <jb...@nanthrax.net>> wrote:
Hi,

I am currently reviewing the security advisories. I have also received
several inquiries from the community regarding the possibility of a new
5.18.x release that includes only the latest CVE fixes.

I will begin preparing that release soon.

Regards,
JB

On Tue, Mar 3, 2026 at 3:13 PM Casey A. Owen via users <
users@activemq.apache.org<ma...@activemq.apache.org>> wrote:

> Hello,
>
> Could someone please clarify why the listed CVEs are not documented in the
> Apache ActiveMQ Classic Security Advisories at
> https://activemq.apache.org/components/classic/security?
>
> Thank you for your prompt attention to this matter,
>
>
> Casey Owen | Sr Applications Analyst
>
>