CLSA-2026-1793195078: TuxCare security update for org.apache.activemq (5 CVEs)

Published Oct 28, 2026
ยท
Updated

TuxCare rebuilt 55 org.apache.activemq packages to address 5 CVEs. Fixed in 2.37.0-tuxcare.3.

Affected Software

55 affected componentsFixes available
tuxcare/org.apache.activemq:activemq-branding>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:apache-artemis>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-amqp-protocol>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-bom>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-boot>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-cdi-client>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-cli>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-commons>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-console>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-core-client>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-core-client-all>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-core-client-osgi>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-dto>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-features>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-hawtio-pom>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-hornetq-protocol>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-hqclient-protocol>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-image>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-image-examples>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-jakarta-client>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-jakarta-client-all>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-jakarta-openwire-protocol>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-jakarta-ra>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-jakarta-server>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-jakarta-service-extensions>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-jdbc-store>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-jms-client>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-jms-client-all>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-jms-client-osgi>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-jms-server>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-journal>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-junit>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-junit-5>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-junit-commons>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-junit-parent>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-lockmanager>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-lockmanager-api>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-lockmanager-ri>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-log-annotation-processor>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-maven-plugin>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-mqtt-protocol>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-openwire-protocol>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-plugin>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-pom>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-project>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-protocols>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-ra>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-selector>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-server>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-server-osgi>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-service-extensions>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-stomp-protocol>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-unit-test-support>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-web>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3
tuxcare/org.apache.activemq:artemis-website>=2.37.0<2.37.0-tuxcare.3
2.37.0-tuxcare.3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade tuxcare/org.apache.activemq:activemq-branding to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  2. Upgrade

    Upgrade tuxcare/org.apache.activemq:apache-artemis to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  3. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-amqp-protocol to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  4. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-bom to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  5. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-boot to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  6. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-cdi-client to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  7. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-cli to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  8. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-commons to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  9. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-console to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  10. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-core-client to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  11. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-core-client-all to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  12. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-core-client-osgi to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  13. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-dto to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  14. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-features to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  15. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-hawtio-pom to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  16. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-hornetq-protocol to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  17. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-hqclient-protocol to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  18. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-image to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  19. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-image-examples to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  20. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-jakarta-client to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  21. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-jakarta-client-all to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  22. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-jakarta-openwire-protocol to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  23. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-jakarta-ra to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  24. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-jakarta-server to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  25. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-jakarta-service-extensions to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  26. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-jdbc-store to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  27. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-jms-client to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  28. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-jms-client-all to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  29. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-jms-client-osgi to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  30. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-jms-server to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  31. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-journal to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  32. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-junit to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  33. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-junit-5 to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  34. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-junit-commons to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  35. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-junit-parent to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  36. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-lockmanager to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  37. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-lockmanager-api to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  38. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-lockmanager-ri to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  39. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-log-annotation-processor to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  40. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-maven-plugin to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  41. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-mqtt-protocol to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  42. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-openwire-protocol to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  43. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-plugin to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  44. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-pom to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  45. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-project to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  46. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-protocols to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  47. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-ra to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  48. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-selector to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  49. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-server to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  50. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-server-osgi to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  51. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-service-extensions to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  52. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-stomp-protocol to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  53. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-unit-test-support to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  54. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-web to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  55. Upgrade

    Upgrade tuxcare/org.apache.activemq:artemis-website to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3
  56. Upgrade

    Upgrade org.apache.activemq to a version that resolves this vulnerability.

    Fixed in 2.37.0-tuxcare.3

Event History

Oct 28, 2026
Advisory Published
via OSVยท01:44 PM
Data Sourced
via OSVยท01:44 PM
DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

Which packages are explicitly identified as affected by this update?

The advisory explicitly lists activemq-branding, apache-artemis, artemis-amqp-protocol, artemis-bom, artemis-boot, artemis-cdi-client, artemis-cli, and artemis-commons under tuxcare/org.apache.activemq. It states that 55 org.apache.activemq packages were rebuilt overall.

2

What version contains the fixes?

The security fixes are included in version 2.37.0-tuxcare.3.

3

How many CVEs does this update address?

This update addresses five CVEs. The provided advisory data does not identify the individual CVE IDs or their impacts.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
ยฉ 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203