Mate Juhasz created OOZIE-3235:
----------------------------------

             Summary: Old ActiveMQ dependency in Oozie
                 Key: OOZIE-3235
                 URL: https://issues.apache.org/jira/browse/OOZIE-3235
             Project: Oozie
          Issue Type: Bug
          Components: client
    Affects Versions: 5.1.0
            Reporter: Mate Juhasz
            Assignee: Mate Juhasz
             Fix For: 5.1.0


An old, and vulnerable version of ActiveMQ is used by Oozie's tests (5.13.3).
It seems that the jars are even included in the oozie-client with "compile" 
scope, but we only use them in unit tests.

Oozie-client uses the JMS-API only from these jars, which could be included 
separately (javax.jms).

The version could be upgraded to 5.14.2 and the scope changed to "test" instead 
of "compile".



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to