RE: [EXTERNAL] Re: ActiveMQ 5.x end of life info

2021-10-15 Thread Giuseppe Sarno
Thanks all for your answers. I guess I have last one 😊 to help with planning. The web site states: Artemis will eventually become the successor to ActiveMQ 5.x as ActiveMQ 6.x. Is there a time line on this ? I am trying to understand how long the ActiveMQ 5.x is actually going to be maintained

Re: [EXTERNAL] Re: ActiveMQ 5.x end of life info

2021-10-15 Thread Robbie Gemmell
You would need to upgrade to a 'current' minor version, i.e something from the website download page which is still seeing releases, typically the latest stream and sometimes an older one. On Fri, 15 Oct 2021 at 08:28, Giuseppe Sarno wrote: > > Hello, > Thanks both. Should have been bit more spec

Re: Re: ActiveMQ 5.x end of life info

2021-10-15 Thread Tetreault, Lucas
Hey Giuseppe, There are no new releases planned for anything older than the 5.16 minor version stream and there is no one backporting patches, upgrades, etc. to those older versions. Your best bet to stay on top of CVEs is to stay on the latest version which is currently 5.16.3: https://activ

Re: TLS 1.3

2021-10-15 Thread Robbie Gemmell
To add to the below, Java 11+ has TLS 1.3 enabled by default, e.g for the generic "TLS" protocol name, so unless something specifically restricts the enabledProtocols then it will be enabled. I believe more recent Java 8 JVMs have it enabled by default on the server side, but not the client side,

RE: [EXTERNAL] Re: ActiveMQ 5.x end of life info

2021-10-15 Thread Giuseppe Sarno
Hello, Thanks both. Should have been bit more specific. What about individual minor versions ? Are those maintained for security patches for example ? let's say I am on 5.13.4 what do I need to do to fix CVE ? will I need to move to a different minor version ? 16 in this case ? or will there be