Release 26.0.1 is the second release in the Horizon 26 series.
It is an off-schedule release to fix a vulnerability in ActiveMQ and the Minion. Thanks to Florian Hauser of Code White for catching this one.
The codename for 26.0.1 is Luchador.
Bug
- Authenticated RCE vulnerability via ActiveMQ Minion payload deserialization (Issue NMS-12673)
[…] the fix is ready, we roll it out as soon as possible, with the next software release, or in an off-schedule release. We include information about the vulnerability in the release notes, social media, and blog posts, […]
[…] MISC MISC MISC MISC […]