[ https://issues.apache.org/jira/browse/AMQ-8474?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17491659#comment-17491659 ]
Imran Ali commented on AMQ-8474: -------------------------------- Hi [~jbonofre] - i am assuming there have been some additional issues which have delayed this release further. Is there any ETA on when this can be released so we can put a statement against our product accordingly. > Log4j 1.x vulnerabilities query for CVE-2022-23307 > -------------------------------------------------- > > Key: AMQ-8474 > URL: https://issues.apache.org/jira/browse/AMQ-8474 > Project: ActiveMQ > Issue Type: Bug > Affects Versions: 5.16.3 > Reporter: Imran Ali > Assignee: Jean-Baptiste Onofré > Priority: Major > > Hi, > There is a new vulnerability discovered against log4j 1.x [CVE - > CVE-2022-23307 > (mitre.org)|http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23307]. Is > there any formal product statement if the latest version of ActiveMQ is > impacted by this vulnerability and if so what areas are impacted and how can > we mitigate this vulnerability. > > Regards, > Arc -- This message was sent by Atlassian Jira (v8.20.1#820001)