[DISCUSS] JDK 1.8 support for ActiveMQ Artemis

2021-12-15 Thread Clebert Suconic
I just sent ActiveMQ Artemis 2.20.0 to be reviewed under Vote. and I would like to clarify that JDK 1.8 will not be supported any more from Artemis 2.20.0 At this point I don't think we need to create a 2.19.x branch for JDK 1.8 Users. I would like to hear from anyone who can't move to JDK 11 he

RE: [EXTERNAL] Re: ActiveMQ 5.16 and log4j vulnerabilities

2021-12-15 Thread Gunawan, Rahman (GSFC-703.H)[BUSINESS INTEGRA, INC.]
I couldn't find ActiveMQ 5.17.x in https://activemq.apache.org/download-archives. Could you please let me know where I can download ActiveMQ 5.17? Thanks Regards, Rahman -Original Message- From: Jean-Baptiste Onofré Sent: Monday, December 13, 2021 4:50 AM To: users@activemq.apache.o

Re: [EXTERNAL] Re: ActiveMQ 5.16 and log4j vulnerabilities

2021-12-15 Thread Justin Bertram
ActiveMQ 5.17.0 has not been released yet which is why you can't find it on the website to download. Note that the website [1] refers to 5.17.0 as "upcoming." Justin [1] https://activemq.apache.org/news/cve-2021-44228 On Wed, Dec 15, 2021 at 2:48 PM Gunawan, Rahman (GSFC-703.H)[BUSINESS INTEGRA

Re: ActiveMQ 5.16 and log4j vulnerabilities

2021-12-15 Thread Justin Bertram
> Could we please get an official statement about ActiveMQ’s security wrt log4j? To be clear, this [1] is the official statement you requested. Justin [1] https://activemq.apache.org/news/cve-2021-44228 On Mon, Dec 13, 2021 at 3:00 AM Lionel Cons wrote: > Recently, a new critical vulnerabili

RE: [EXTERNAL] Re: ActiveMQ 5.16 and log4j vulnerabilities

2021-12-15 Thread Gunawan, Rahman (GSFC-703.H)[BUSINESS INTEGRA, INC.]
We are using ActiveMQ Classic 5.15.4. Thus, we need to upgrade to either ActiveMQ Classic 5.15.15 or 5.16.3, correct? Thanks Regards, Rahman -Original Message- From: Justin Bertram Sent: Wednesday, December 15, 2021 3:58 PM To: users@activemq.apache.org Subject: [EXTERNAL] Re: Active

Re: [EXTERNAL] Re: ActiveMQ 5.16 and log4j vulnerabilities

2021-12-15 Thread Justin Bertram
> We are using ActiveMQ Classic 5.15.4. Thus, we need to upgrade to either ActiveMQ Classic 5.15.15 or 5.16.3, correct? That is *not* correct. Did you happen to take a look at the documentation [1] on this which I linked? There are some highlighted statements which answer your question specifical