I'm not against updating ActiveMQ on 7.0.x, but I suspect that might mean
we lose compatibility with Java 7. I forget which version Jonathan (Fisher)
is running, but I suspect that's not an issue for him.

I'll take a look at the versions, and start a thread so the community can
decide what to do.

Jon

On Fri, Sep 27, 2019 at 9:39 AM Zowalla, Richard <
richard.zowa...@hs-heilbronn.de> wrote:

> Hi Jonathan,
>
> current 7.1.1-SNAPSHOT branch is on ActiveMQ 5.15.10
>
> This update was conducted due to several CVE's related to its transient
> jackson-databind dependency.
>
> But, if I am right, you are still on 7.0.x - which has not been updated
> yet :)
>
> Best,
> Richard
>
> Am Dienstag, den 24.09.2019, 10:57 -0500 schrieb Jonathan S. Fisher:
>
> So I've got a test case, but it will likely just be isolated to us. We were
>
> upgrading the ActiveMQ RAR to 5.15.9 to enable strict host checking on TLS
>
> certificates. If we keep the stock ActiveMQ rar/jar we don't see the
>
> problem.
>
>
> So I guess take note of that if someone ever asks for an upgrade, the
>
> failover protocol will collapse a 32m JVM after about 10k messages.
>
>
> On Mon, Sep 23, 2019 at 5:20 PM Jean-Louis Monteiro <
>
> jlmonte...@tomitribe.com> wrote:
>
>
> I have opened this ticket and pushed a fix on both Java EE 7 and 8 API jar.
>
> New snapshot deployed.
>
>
> I'm waiting for the full build on master to pass and then I'll close the
>
> ticket and fire up the 2 releases so you can move on with TomEE
>
>
> --
>
> Jean-Louis Monteiro
>
> http://twitter.com/jlouismonteiro
>
> http://www.tomitribe.com
>
>
>
> On Mon, Sep 23, 2019 at 3:03 PM Jonathan Gallimore <
>
> jonathan.gallim...@gmail.com> wrote:
>
>
> Oh wow, that would be amazing!
>
>
> On Mon, Sep 23, 2019 at 10:49 PM Jonathan S. Fisher <exabr...@gmail.com>
>
> wrote:
>
>
> I'll get a reproducer project put together that demos the bug.
>
>
> On Mon, Sep 23, 2019 at 4:32 PM Jonathan Gallimore <
>
> jonathan.gallim...@gmail.com> wrote:
>
>
> If we can come up with some good tests for it, I don't see why not.
>
>
> Jon
>
>
> On Mon, Sep 23, 2019 at 10:25 PM Jonathan S. Fisher <
>
> exabr...@gmail.com>
>
> wrote:
>
>
> We've been running 7.0.x latest in prod for a few weeks with no
>
> issues
>
> other than the ActiveMQ Failover protocol memory leak issue (which
>
> affects
>
> all versions of TomEE).
>
> https://issues.apache.org/jira/browse/AMQ-6391 This is an issue
>
> now
>
> because
>
> our JMS Context / Connection Factories will actually be
>
> transactional
>
>
> Should/Could we patch the ActiveMQ jar?
>
>
>
>
> On Mon, Sep 23, 2019 at 3:24 PM Jean-Louis Monteiro <
>
> jlmonte...@tomitribe.com> wrote:
>
>
> The Locator issue raised earlier today. Would be great to get the
>
> fix
>
> in
>
> before rolling.
>
> --
>
> Jean-Louis Monteiro
>
> http://twitter.com/jlouismonteiro
>
> http://www.tomitribe.com
>
>
>
> On Mon, Sep 23, 2019 at 12:33 PM Jonathan Gallimore <
>
> jonathan.gallim...@gmail.com> wrote:
>
>
> I'm just doing some cleanup on these branches. I'm thinking its
>
> probably time we put out new releases as these branches have
>
> seen
>
> some
>
> fixes.
>
>
> Is there anything that we think is missing before I kick off
>
> some
>
> releases
>
> and votes?
>
>
> I'd like to get the quartz-openejb-shade update if possible -
>
> that
>
> needs
>
> some more reviewers and votes.
>
>
> Jon
>
>
>
>
>
> --
>
> Jonathan | exabr...@gmail.com
>
> Pessimists, see a jar as half empty. Optimists, in contrast, see it
>
> as
>
> half
>
> full.
>
> Engineers, of course, understand the glass is twice as big as it
>
> needs
>
> to
>
> be.
>
>
>
>
>
> --
>
> Jonathan | exabr...@gmail.com
>
> Pessimists, see a jar as half empty. Optimists, in contrast, see it as
>
> half
>
> full.
>
> Engineers, of course, understand the glass is twice as big as it needs
>
> to
>
> be.
>
>
>
>
>
>
>
> --
>
> Richard Zowalla, M.Sc.
> Research Associate, PhD Student | Medical Informatics
>
>
>
> Hochschule Heilbronn – University of Applied Sciences
> Max-Planck-Str. 39
> D-74081 Heilbronn
> phone: +49 7131 504 6791
> mail: richard.zowa...@hs-heilbronn.de
> web: http://www.mi.hs-heilbronn.de/
>

Reply via email to