Hello Nacho- This v6.2.10 release is an unplanned fix release to solve for the incompatible Apache Camel version that was inadvertently included.
The v6.2.x release stream is inactive, due to its reliance on out-dated (and EOL) core dependencies (Jetty, Spring ,etc). Your best course of action is to upgrade to the latest in the v6.3.x series, which is compatible and provides the CVE fix you are asking about. Is there a reason upgrading to a v6.3.x release is problematic for your environment? Thanks, Matt Pavlovich Apache ActiveMQ PMC > On Sep 26, 2026, at 3:41 AM, Nacho Barrientos via dev > <[email protected]> wrote: > > Hi, > > Sorry for sticking my oar in. > > May I please ask if the patch for CVE-2026-74761 [0] is shipped in this > release? > > Thanks. > > [0] https://www.openwall.com/lists/oss-security/2026/09/08/12 > > On 26/09/26, Jean-Baptiste Onofré said: > >> Hi, >> >> This vote passed with the following result: >> >> +1 (binding): Chris Shannon, JB Onofré, Matt Pavlovich >> +1 (non binding): Loris Boiteux, Jamie Goodyear, Jean-Louis Monteiro >> >> I'm promoting the artifacts on dist and Maven Central, I will publish the >> release on website and GitHub and I will make the announcement. >> >> Thanks everyone for your vote! >> >> Regards >> JB >> >> On Tue, Sep 22, 2026 at 6:39 AM Jean-Baptiste Onofré <[email protected]> >> wrote: >> >>> Hi everyone, >>> >>> I propose Apache ActiveMQ 6.2.10 (rc0) release for your vote. >>> >>> This release includes: >>> - Downgrade to Camel 4.18.4 to align Spring versions between ActiveMQ and >>> Camel >>> >>> You can review the Pre-Release Notes for details: >>> https://github.com/apache/activemq/releases/tag/activemq-6.2.10 >>> >>> Staging Maven Repository: >>> https://repository.apache.org/content/repositories/orgapacheactivemq-1544/ >>> >>> Staging Dist Repository: >>> https://dist.apache.org/repos/dist/dev/activemq/activemq/6.2.10/ >>> >>> Git tag: >>> https://github.com/apache/activemq/tree/activemq-6.2.10 >>> >>> Please vote to approve this release: >>> [ ] +1 Approve the release >>> [ ] 0 I don't care >>> [ ] -1 Don't approve the release (please provide specific comment) >>> >>> This vote will be open for at least 72 hours. >>> >>> Thanks! >>> Regards >>> JB >>> > > -- > bye > Nacho > http://cern.ch/nacho > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > For further information, visit: https://activemq.apache.org/contact > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] For further information, visit: https://activemq.apache.org/contact
