From f912504258e21d97bbc17fae69b6a06cc6574fe3 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 20 Dec 2023 19:17:16 +0000 Subject: [PATCH] Publish GHSA-23cr-5hr4-rgwv --- .../GHSA-23cr-5hr4-rgwv.json | 34 +++++++++++++++++-- 1 file changed, 32 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2022/05/GHSA-23cr-5hr4-rgwv/GHSA-23cr-5hr4-rgwv.json b/advisories/github-reviewed/2022/05/GHSA-23cr-5hr4-rgwv/GHSA-23cr-5hr4-rgwv.json index 30d552aa014..c8a202001a5 100644 --- a/advisories/github-reviewed/2022/05/GHSA-23cr-5hr4-rgwv/GHSA-23cr-5hr4-rgwv.json +++ b/advisories/github-reviewed/2022/05/GHSA-23cr-5hr4-rgwv/GHSA-23cr-5hr4-rgwv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-23cr-5hr4-rgwv", - "modified": "2022-07-06T20:11:13Z", + "modified": "2023-12-20T19:15:58Z", "published": "2022-05-17T03:22:06Z", "aliases": [ "CVE-2015-6524" @@ -15,7 +15,29 @@ { "package": { "ecosystem": "Maven", - "name": "org.apache.activemq:activemq-client" + "name": "org.apache.activemq:activemq-broker" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "5.0.0" + }, + { + "fixed": "5.10.2" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 5.10.1" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.activemq:activemq-jaas" }, "ranges": [ { @@ -40,6 +62,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-6524" }, + { + "type": "WEB", + "url": "https://github.com/apache/activemq/commit/22f2f3dde757d31307da772d579815c1d169bc39" + }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/activemq/" + }, { "type": "WEB", "url": "http://activemq.apache.org/security-advisories.data/CVE-2014-3612-announcement.txt"