CV_2023_11_1: Remote Code Execution Vulnerability in Apache ActiveMQ
along with a resolution recommending upgrading to the Maintenance Release builds of 11.32.83, 11.30.64, and 11.28.83.
Just wondering, what about the earlier builds such as 11.24?
Does the security vulnerability affect these earlier builds?
If it does, then what should be the recommended Maintenance Release build for 11.24?
Best answer by Albert Williams
Hello @JSNOPUD
Thanks for the great question!
Looking at our internal system I can see that SP24 and SP20 both have a scheduled build that is queued for creation
For me to get more details around an eta as to when it may be available i will need to create an official Dev escalation and that would require a support case with your CSDB attached to it.
I’m sorry I cannot provide further details but it does seem it has not been forgotten, just lower on the action list list the bulk of current customers are on FR28 and above and how close FR20 is to out of support.
Looking at our internal system I can see that SP24 and SP20 both have a scheduled build that is queued for creation
For me to get more details around an eta as to when it may be available i will need to create an official Dev escalation and that would require a support case with your CSDB attached to it.
I’m sorry I cannot provide further details but it does seem it has not been forgotten, just lower on the action list list the bulk of current customers are on FR28 and above and how close FR20 is to out of support.
