Hi Matt, Thanks for your message.
On 26/09/26, Matt Pavlovich said: > This v6.2.10 release is an unplanned fix release to solve for the > incompatible Apache Camel version that was inadvertently included. I see. No worries, I was just naively hoping that you would have considered including the patch as you were going to release a new 6.2 anyway :) > Your best course of action is to upgrade to the latest in the v6.3.x > series, which is compatible and provides the CVE fix you are asking > about. > > Is there a reason upgrading to a v6.3.x release is problematic for > your environment? Not at all, it's just that our validation procedures for a patch version bump are more lightweight than those for a minor version bump so it would have been more straightforward to get that CVE patched if it had been included in 6.2.10. Thanks again and best wishes, -- bye Nacho http://cern.ch/nacho --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] For further information, visit: https://activemq.apache.org/contact
