Re: [HEADS UP] ActiveMQ 5.15.10 release preparation

2019-07-03 Thread Jean-Baptiste Onofré
Hi guys, just a quick update about 5.15.10 preparation. Some more cherry-pick have been done and I have more in the TODO list. I plan to submit 5.15.10 to vote next week. I keep you posted. Regards JB On 13/06/2019 14:53, Jean-Baptiste Onofré wrote: > Hi guys, > > some days ago, I proposed

Re: ActiveMQ cve vulnerabilities seen in latest version

2019-07-03 Thread Jean-Baptiste Onofré
HI, I gonna take a look. If the CVE has been published, they should be fixed already. The point is more on which branch it has been fixed. So, let me do a pass as I'm preparing 5.15.10. Regards JB On 04/07/2019 06:01, venu madhav wrote: > Hi team, > > I am running a dummy project to scan the

ActiveMQ cve vulnerabilities seen in latest version

2019-07-03 Thread venu madhav
Hi team, I am running a dummy project to scan the vulnerabilities using owasp dependency-check. The project doesn't contain anything except for the activemq jars added as dependencies in the pom.xml. Even when we use the latest version of activemq-kahadb-store jar (5.15.9 version) we see some