April Linux Patch Wednesday

April Linux Patch Wednesday. In April, Linux vendors addressed 1,035 vulnerabilities - nearly twice as many as in March. One might assume that most of these would again be Linux Kernel vulnerabilities, but that's not the case! Linux Kernel vulnerabilities were relatively few - just 209. The...

GHSA-H2H4-5M64-M273 vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq-artemis...

CVE-2026-39304 vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq-artemis...

CVE-2026-33227 vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq-artemis...

GHSA-5568-6QCG-G7FX vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq-artemis...

VulnCheck KEV: CVE-2024-32114

In Apache ActiveMQ 6.x, the default configuration doesn't secure the API web context where the Jolokia JMX REST API and the Message REST API are located. It means that anyone can use these layers without any required authentication. Potentially, anyone can interact with the broker using Jolokia J...

GHSA-RXPJ-7QVF-XV32 vulnerabilities

Vulnerabilities for packages: geoserver, apache-activemq, apache-activemq-fips...

CVE-2026-34197 vulnerabilities

Vulnerabilities for packages: geoserver, apache-activemq, apache-activemq-fips...

ROOT-OS-DEBIAN-12-CVE-2026-34197 CVE-2026-34197 in rootio-activemq - Patched by Root

Root has patched CVE-2026-34197 in the rootio-activemq package for Root:Debian:12. Multiple fixed versions available...

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation

A recently disclosed high-severity security flaw in Apache ActiveMQ Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and Infrastructure Security Agency CISA. To that end, the agency has added the vulnerability, tracked as CVE-2026-34197 CVSS score: 8.8, to its...

BIT-ACTIVEMQ-2026-39304 Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOM

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ. ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to rapidly trigger updates which causes...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-34197link is external Apache ActiveMQ Improper Input Validation Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber acto...

Apache ActiveMQ Improper Input Validation Vulnerability

Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection...

Exploit for CVE-2026-34197

CVE-2026-34197 — Apache ActiveMQ Classic RCE via Jolokia API...

BIT-ACTIVEMQ-2026-40046 Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168: MQTT control packet remaining length field is not properly validated

Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT. The fix for "CVE-2025-66168: MQTT control packet remaining length field is not properly validated" was only applied to 5.19.2 and future 5.19.x releases but was missed for all 6.0.0+...

Linux Distros Unpatched Vulnerability : CVE-2026-40046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT. The fix for CVE-2025-66168: MQTT control packet...

VulnCheck KEV: CVE-2026-34197

Improper Input Validation, Improper Control of Generation of Code 'Code Injection' vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ. Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations o...

CVE-2026-34480 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, apache-pulsar, elasticsearch, apache-pulsar-fips, ghidra, infinispan, apache-hop, kafka, apache-hop-fips, nuxeo, kafka-bridge-fips, apache-activemq, elasticsearch-fips, kafka-bridge, apache-jena-fuseki, solr, spark-kubernetes-operator, flink,...

GHSA-3PXV-7CMR-FJR4 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, apache-pulsar, elasticsearch, apache-pulsar-fips, ghidra, infinispan, apache-hop, kafka, apache-hop-fips, nuxeo, kafka-bridge-fips, apache-activemq, elasticsearch-fips, kafka-bridge, apache-jena-fuseki, solr, spark-kubernetes-operator, flink,...

CVE-2026-39304

A flaw was found in Apache ActiveMQ Client, Apache ActiveMQ Broker, and Apache ActiveMQ. A remote attacker can exploit this vulnerability by rapidly triggering Transport Layer Security TLS version 1.3 handshake KeyUpdates. This improper handling of KeyUpdates causes the broker to exhaust its memo...