Scripts and Stuff WAS [HEADS UP] Artemis 2.27.0 next week

2022-10-29 Thread Clebert Suconic
We should actually review this before we release. our scripts in artemis are a bit messy. The idea of the artemis.profile was to be a single point o update between releases, but now variables and locations have spread into artemis, artemis.cmd, bootstrap.xml, jass-security-manager.. Is there

Re: ActiveMQ and Jackson Databind security vulnerabilities

2022-10-29 Thread Jean-Baptiste Onofré
And back to your question, jackson (including jackson-databind) is used only in webconsole (and partition but that's rare ;)). So basically, if you don't use/expose ActiveMQ WebConsole, you don't have any risk. Furthermore, jackson databind is used in webconsole to marshall/unmarshall console

Re: ActiveMQ and Jackson Databind security vulnerabilities

2022-10-29 Thread Jean-Baptiste Onofré
Hi, It's already on track, with Jira and PR: https://issues.apache.org/jira/browse/AMQ-9130 https://github.com/apache/activemq/pull/925 I plan to submit 5.17.3 release to vote next week. Regards JB On Fri, Oct 28, 2022 at 11:48 AM Peter Raymond wrote: > > Hi, > > I see the latest version of