[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for activemq issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Jul 3 19:44:22 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
05812218 by Salvatore Bonaccorso at 2026-07-03T20:42:56+02:00
Add Debian bug reference for activemq issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3197,13 +3197,13 @@ CVE-2026-58010 (A flaw was found in GLib. An off-by-one error can occur in the g
 	NOTE: https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5134 (2.88.1)
 	NOTE: https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5135 (2.86.5)
 CVE-2026-54475 (Missing Authorization vulnerability in Apache ActiveMQ Broker, Apache  ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://lists.apache.org/thread/85f3q7mkh71y7qwyn6wvgw0bw4jl06ys
 CVE-2026-53917 (Memory Allocation with Excessive Size Value vulnerability in Apache Ac ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://lists.apache.org/thread/grrd1mwgkgblqjbwkkq6dvmdxd9ov2dx
 CVE-2026-53916 (Memory Allocation with Excessive Size Value vulnerability in Apache Ac ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://lists.apache.org/thread/07hjsj88hqgsb7vvg6ttsj56ts9vjs5n
 CVE-2026-53692 (Redeight CMS version 1.0 uses the MD5 algorithm without a salt to stor ...)
 	NOT-FOR-US: Redeight CMS
@@ -3220,13 +3220,13 @@ CVE-2026-53432 (fzf is vulnerable toInteger Overflow leading to crash in FuzzyMa
 	NOTE: Fixed by: https://github.com/junegunn/fzf/commit/ccedd064ca56921a4235219516b3d834f60e7b91 (v0.73.0)
 	NOTE: Crash in CLI tool, no security impact
 CVE-2026-52760 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://lists.apache.org/thread/d3mhyo2116nomz2lwxppyy4pclvdxq3n
 CVE-2026-50750 (Denial of Service via Out of Memory vulnerability in Apache ActiveMQ B ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://lists.apache.org/thread/nhkmbdym61yp6wwy0dny8w1p46sm87kr
 CVE-2026-50734 (Memory Allocation with Excessive Size Value vulnerability in Apache Ac ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://lists.apache.org/thread/nxso951fnvf72qf9m475mpz4yf931xk0
 CVE-2026-4629 (A flaw was found in Keycloak. A highly privileged user with `manage-cl ...)
 	- keycloak <itp> (bug #1088287)
@@ -3245,15 +3245,15 @@ CVE-2026-4360 (In the Tarfile.extract() function, the filter parameter is not pa
 	NOTE: https://github.com/python/cpython/commit/5e0ef3f1afe892e4f64eb83368db57ac4c40cba0 (3.14 branch)
 	NOTE: https://github.com/python/cpython/commit/eee3ddf0ca10283cc7fea724aae9cd8665f8d15e (3.13 branch)
 CVE-2026-49877 (Improper Authorization vulnerability in Apache ActiveMQ.  An authentic ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://lists.apache.org/thread/w82vtc3q02j5ot94tnyy1197y3wb98hl
 CVE-2026-49451 (The OpenAPI.NET SDK contains a useful object model for OpenAPI documen ...)
 	NOT-FOR-US: OpenAPI.NET SDK
 CVE-2026-49434 (Improper Input Validation vulnerability in Apache ActiveMQ Broker, Apa ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://lists.apache.org/thread/hcjh7kdk4l85tb9ksmvcnkhso1ngj50o
 CVE-2026-49432 (Improper Input Validation vulnerability in Apache ActiveMQ, Apache Act ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://lists.apache.org/thread/fsjb26605syqr8xks249h8gkp86t55d2
 CVE-2026-48315 (ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Imp ...)
 	NOT-FOR-US: Adobe
@@ -23082,10 +23082,10 @@ CVE-2026-7770 (IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client
 CVE-2026-49361 (Apache Fluss versions prior to 0.9.1 configure the Netty LengthFieldBa ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-49270 (Exposure of Sensitive Information Through Metadata vulnerability in Ap ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/05/31/22
 CVE-2026-49157 (Incorrect Default Permissions vulnerability in Apache ActiveMQ.  This  ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/05/31/21
 CVE-2026-49121 (AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthent ...)
 	NOT-FOR-US: AI Tensor Engine for ROCm (AITER)
@@ -23122,7 +23122,7 @@ CVE-2026-48187 (An uncontrolled allocation of resources without limits or thrott
 CVE-2026-47294 (Improper neutralization of special elements used in an os command ('os ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-46605 (Incomplete authorization by Apache ActiveMQ server before versions v6. ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/05/31/20
 CVE-2026-45810 (Nextcloud is an open source content collaboration platform. In Nextclo ...)
 	- nextcloud-server <itp> (bug #941708)
@@ -23149,7 +23149,7 @@ CVE-2026-45544 (Nextcloud is an open source content collaboration platform. From
 CVE-2026-45543 (Nextcloud is an open source content collaboration platform. From versi ...)
 	NOT-FOR-US: Nextcloud Forms
 CVE-2026-45505 (Improper Input Validation, Improper Control of Generation of Code ('Co ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/05/31/19
 CVE-2026-45302 (parse-nested-form-data is a tiny node module for parsing FormData by n ...)
 	NOT-FOR-US: parse-nested-form-data
@@ -23239,10 +23239,10 @@ CVE-2026-42672 (Improper Neutralization of Special Elements used in an SQL Comma
 CVE-2026-42671 (Missing Authorization vulnerability in Paolo GeoDirectory allows Explo ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-42588 (Improper Input Validation, Improper Control of Generation of Code ('Co ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/05/31/18
 CVE-2026-42253 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/05/31/17
 CVE-2026-42251 (Use of hard-coded credentials in KS-SOMED allowed an unauthorized atta ...)
 	NOT-FOR-US: KS-SOMED
@@ -76899,7 +76899,7 @@ CVE-2025-66944 (SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and b
 CVE-2025-66678 (An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware  ...)
 	NOT-FOR-US: Nil Hardware Editor
 CVE-2025-66168 (WARNING:  Users of 6.x should upgrade to 6.2.4 or later as the fix was ...)
-	- activemq <unfixed>
+	- activemq <unfixed> (bug #1141385)
 	NOTE: https://www.openwall.com/lists/oss-security/2026/03/03/5
 	NOTE: https://issues.apache.org/jira/browse/AMQ-9810
 	NOTE: Fixed by: https://github.com/apache/activemq/commit/3f0720c085b24f25c98e414fefc007bc42470ee3 (activemq-5.19.2)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05812218816f1a37d48192f6bbab1136450259b5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05812218816f1a37d48192f6bbab1136450259b5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260703/f7edd4b0/attachment.htm>

More information about the debian-security-tracker-commits mailing list