[
https://issues.apache.org/jira/browse/QPID-8579?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17514797#comment-17514797
]
Robert Godfrey commented on QPID-8579:
--------------------------------------
The qpid-jms-amqp-0-x component is no longer being actively developed. The
last release was two years ago as version 6.4.0. The current Qpid JMS client
is [Qpid JMS 1.5.0|https://qpid.apache.org/releases/qpid-jms-1.5.0/index.html]
which you can find at github here: https://github.com/apache/qpid-jms/tree/1.5.0
> [AMQP-J] main branch uses many insecure libs
> --------------------------------------------
>
> Key: QPID-8579
> URL: https://issues.apache.org/jira/browse/QPID-8579
> Project: Qpid
> Issue Type: Improvement
> Reporter: PJ Fanning
> Priority: Major
>
> ```
> <logback-version>1.2.3</logback-version>
> <guava-version>27.0-jre</guava-version>
> <fasterxml-jackson-version>2.10.4</fasterxml-jackson-version>
> <httpclient-version>4.5.3</httpclient-version>
> ```
> All of these have open CVEs
> https://github.com/apache/qpid-jms-amqp-0-x/blob/main/pom.xml
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
