Upgrade to Spring 5.3.32 for ActiveMQ 5.18.4 because of CVE-2024-22243?

2024-02-26 Thread Boeltl, Stefan
Hi, We're getting security findings regarding CVE-2024-22243 when scanning ActiveMQ 5.18.3. Didn't want to raise a ticket straight away but first check with "the powers that be", whether CVE-2024-22243 is relevant and an upgrade to version 5.3.32 is being planned for 5.18.4 since I could not fi

AcitveMQ 6.0.1 and Spring Framework CVE-2024-22243

2024-02-26 Thread James Velasco
Apparently ActiveMQ 6.0.1 uses spring-web v6.0.14 which is impacted by CVE-2024-22243. See https://spring.io/security/cve-2024-22243. — James Velasco Chief Computer Scientist Office: +1 (713) 975-7434 james.vela...@int.com INT | Empowering Visualization

Re: Have Artemis installed, Need advice where to start and how to start using it ... from IBM MQ world

2024-02-26 Thread Justin Bertram
> One address can be used for anycast and multicast, and it is a real mess. Technically speaking this is possible, but it's discouraged in the documentation [1] not least because it can become "a real mess." > Clients can auto-create queues with incorrect routing type (if it is permitted to creat

Re: Suggested improvement in documentation section "Using Core"

2024-02-26 Thread Jiri Daněk
On Mon, Feb 26, 2024 at 4:11 PM Ben F. Zhou wrote: > Hi Justin, > > Thanks for the information. I'll go ahead to learn these tools. > That might be a bit too much learning to do upfront. I suggest you do this instead. GitHub has two ways to let you edit files without really knowing Git at all.

RE: Suggested improvement in documentation section "Using Core"

2024-02-26 Thread Ben F. Zhou
Hi Justin, Thanks for the information. I'll go ahead to learn these tools. this is apparently a fantastic community. It will be great if I can contribute to it in a small way. Thanks a lot! Ben -Original Message- From: Justin Bertram Sent: Sunday, February 25, 2024 11:51 PM To: users

Re: Issue with network of brokers and active/passive pair

2024-02-26 Thread Bruce Cooper
Hi Marco, Thanks for checking back in. from pom.xml org.apache.activemq activemq-client 5.15.8 org.apache.activemq activemq-pool 5.15.8 The server is 5.17.6 When you asked this, I realised my dependencies were kind of old, so I updated it to jakarta.jms jakarta.jms-api 3.1.0 org.apa

RE: Message delivery failure and Primary Key violation on load balanced ActiveMQ Broker

2024-02-26 Thread Jack Fry (They/Them)
Hi Marco, Thanks for getting back to me, we're really scratching our heads over this one. The second log frame is on a different broker to the first log frame. We assume the first broker is creating the record but not sending the message, then the second broker cannot create the record and canno

Re: Issue with network of brokers and active/passive pair

2024-02-26 Thread Marco Garavello
Hello Bruce, thanks for sharing precise info That sounds really very strange and sounds like a bug of AMQ (or a configuration issue). A question, maybe trivial: which version of AMQ jar library are you using on your Java producer? *Distinti Saluti / *Kind Regards M.G. Il giorno lun 26 feb 202