OESA-2023-1778

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1778
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2023-1778.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2023-1778
Upstream
Published
2023-11-03T11:06:12Z
Modified
2025-09-03T06:19:35.048188Z
Summary
activemq security update
Details

The most popular and powerful open source messaging and Integration Patterns server.

Security Fix(es):

Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker with network access to a broker to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath. 

Users are recommended to upgrade to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3, which fixes this issue.(CVE-2023-46604)

Database specific 
{
    "severity": "Critical"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / activemq

Package

Name
activemq
Purl
pkg:rpm/openEuler/activemq&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.16-1.oe1

Ecosystem specific 

{
    "src": [
        "activemq-5.15.16-1.oe1.src.rpm"
    ],
    "noarch": [
        "activemq-5.15.16-1.oe1.noarch.rpm",
        "activemq-javadoc-5.15.16-1.oe1.noarch.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / activemq

Package

Name
activemq
Purl
pkg:rpm/openEuler/activemq&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.16-1.oe1

Ecosystem specific 

{
    "src": [
        "activemq-5.15.16-1.oe1.src.rpm"
    ],
    "noarch": [
        "activemq-javadoc-5.15.16-1.oe1.noarch.rpm",
        "activemq-5.15.16-1.oe1.noarch.rpm"
    ]
}

openEuler:22.03-LTS / activemq

Package

Name
activemq
Purl
pkg:rpm/openEuler/activemq&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.16-1.oe2203sp2

Ecosystem specific 

{
    "src": [
        "activemq-5.15.16-1.oe2203.src.rpm",
        "activemq-5.15.16-1.oe2203sp1.src.rpm",
        "activemq-5.15.16-1.oe2203sp2.src.rpm"
    ],
    "noarch": [
        "activemq-javadoc-5.15.16-1.oe2203.noarch.rpm",
        "activemq-5.15.16-1.oe2203.noarch.rpm",
        "activemq-javadoc-5.15.16-1.oe2203sp1.noarch.rpm",
        "activemq-5.15.16-1.oe2203sp1.noarch.rpm",
        "activemq-javadoc-5.15.16-1.oe2203sp2.noarch.rpm",
        "activemq-5.15.16-1.oe2203sp2.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP1 / activemq

Package

Name
activemq
Purl
pkg:rpm/openEuler/activemq&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.16-1.oe2203sp1

Ecosystem specific 

{
    "src": [
        "activemq-5.15.16-1.oe2203sp1.src.rpm"
    ],
    "noarch": [
        "activemq-javadoc-5.15.16-1.oe2203sp1.noarch.rpm",
        "activemq-5.15.16-1.oe2203sp1.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP2 / activemq

Package

Name
activemq
Purl
pkg:rpm/openEuler/activemq&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.16-1.oe2203sp2

Ecosystem specific 

{
    "src": [
        "activemq-5.15.16-1.oe2203sp2.src.rpm"
    ],
    "noarch": [
        "activemq-javadoc-5.15.16-1.oe2203sp2.noarch.rpm",
        "activemq-5.15.16-1.oe2203sp2.noarch.rpm"
    ]
}