[GERONIMO-4262] Include patched build of AMQ 4.1.2 to resolve AMQ-1272 security exposure

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.1.1, 2.0.2, 2.1.2, 2.2
• Fix Version/s: 2.0.3, 2.1.3, 2.2
• Component/s: ActiveMQ
• Security Level: public (Regular issues)
• Assignee: Donald Woods
• Reporter: Donald Woods
• Created: 25/Aug/08 14:32
• Updated: 26/Aug/08 20:15
• Resolved: 26/Aug/08 20:15

Description

Need to include a patched activemq-core jarfile to fix the following security exposure that was fixed in AMQ 5.1.0 -
https://issues.apache.org/activemq/browse/AMQ-1272
Stomp protocol does not correctly check authentication (security hole)