;; ;; Licensed to the Apache Software Foundation (ASF) under one ;; or more contributor license agreements. See the NOTICE file ;; distributed with this work for additional information ;; regarding copyright ownership. The ASF licenses this file ;; to you under the Apache License, Version 2.0 (the ;; “License”); you may not use this file except in compliance ;; with the License. You may obtain a copy of the License at ;; ;; http://www.apache.org/licenses/LICENSE-2.0 ;; ;; Unless required by applicable law or agreed to in writing, ;; software distributed under the License is distributed on an ;; “AS IS” BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY ;; KIND, either express or implied. See the License for the ;; specific language governing permissions and limitations ;; under the License. ;;

Security

CVE-ID	Severity	Affected versions	Fixed versions	Summary
CVE-2016-4467	Medium	0.8 through 0.13.0 inclusive	0.13.1 and later	Failure to verify that the server host name matches the certificate host name on Windows
CVE-2016-2166	Moderate	0.9 through 0.12.0 inclusive	0.12.1 and later	Python bindings silently ignore request for amqps if SSL/TLS not supported

See the main Security page for general information and details for other components.