CVE-2023-46604: Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

Affected versions: - Apache ActiveMQ 5.18.0 before 5.18.3 - Apache ActiveMQ 5.17.0 before 5.17.6 - Apache ActiveMQ 5.16.0 before 5.16.7 - Apache ActiveMQ before 5.15.16 - Apache ActiveMQ Legacy OpenWire Module 5.18.0 before 5.18.3 - Apache ActiveMQ Legacy OpenWire Module 5.17.0 before 5.17.6 -

[jira] [Commented] (AMQ-5748) Add the ability to get Message Size from a Message Store

[ https://issues.apache.org/jira/browse/AMQ-5748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14517033#comment-14517033 ] Christopher L. Shannon commented on AMQ-5748: - Hi Gary, Thanks for taking

[jira] [Created] (AMQ-5750) Add exception handler to TaskRunnerFactory

Christopher L. Shannon created AMQ-5750: --- Summary: Add exception handler to TaskRunnerFactory Key: AMQ-5750 URL: https://issues.apache.org/jira/browse/AMQ-5750 Project: ActiveMQ Issue

[jira] [Comment Edited] (AMQ-5748) Add the ability to get Message Size from a Message Store

[ https://issues.apache.org/jira/browse/AMQ-5748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14517963#comment-14517963 ] Christopher L. Shannon edited comment on AMQ-5748 at 4/28/15 9:06 PM

[jira] [Commented] (AMQ-5748) Add the ability to get Message Size from a Message Store

[ https://issues.apache.org/jira/browse/AMQ-5748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14517963#comment-14517963 ] Christopher L. Shannon commented on AMQ-5748: - Gary, I went ahead and updated

[jira] [Commented] (AMQ-5748) Add the ability to get Message Size from a Message Store

[ https://issues.apache.org/jira/browse/AMQ-5748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14518066#comment-14518066 ] Christopher L. Shannon commented on AMQ-5748: - Timothy, It looks pretty

[jira] [Comment Edited] (AMQ-5748) Add the ability to get Message Size from a Message Store

[ https://issues.apache.org/jira/browse/AMQ-5748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14514811#comment-14514811 ] Christopher L. Shannon edited comment on AMQ-5748 at 4/27/15 7:46 PM

[jira] [Commented] (AMQ-5748) Add the ability to get Message Size from a Message Store

[ https://issues.apache.org/jira/browse/AMQ-5748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14514811#comment-14514811 ] Christopher L. Shannon commented on AMQ-5748: - I made a quick update update

[jira] [Comment Edited] (AMQ-5748) Add the ability to get Message Size from a Message Store

[ https://issues.apache.org/jira/browse/AMQ-5748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14514811#comment-14514811 ] Christopher L. Shannon edited comment on AMQ-5748 at 4/27/15 7:44 PM

[jira] [Created] (AMQ-5748) Add the ability to get Message Size from a Message Store

Christopher L. Shannon created AMQ-5748: --- Summary: Add the ability to get Message Size from a Message Store Key: AMQ-5748 URL: https://issues.apache.org/jira/browse/AMQ-5748 Project: ActiveMQ

[jira] [Commented] (AMQ-5712) Broker can deadlock when using queues while producers wait on disk space

[ https://issues.apache.org/jira/browse/AMQ-5712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14507000#comment-14507000 ] Christopher L. Shannon commented on AMQ-5712: - Thanks Timothy. I have tested

[jira] [Commented] (AMQ-5736) JMS 2.0 Support

[ https://issues.apache.org/jira/browse/AMQ-5736?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14506184#comment-14506184 ] Christopher L. Shannon commented on AMQ-5736: - I would like to see this feature

[jira] [Commented] (AMQ-5712) Broker can deadlock when using queues while producers wait on disk space

[ https://issues.apache.org/jira/browse/AMQ-5712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14492775#comment-14492775 ] Christopher L. Shannon commented on AMQ-5712: - Great, thanks for your help

[jira] [Commented] (AMQ-5712) Broker can deadlock when using queues while producers wait on disk space

[ https://issues.apache.org/jira/browse/AMQ-5712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14492920#comment-14492920 ] Christopher L. Shannon commented on AMQ-5712: - As Timothy said, PFC doesn't make

[jira] [Comment Edited] (AMQ-5712) Broker can deadlock when using queues while producers wait on disk space

[ https://issues.apache.org/jira/browse/AMQ-5712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14492786#comment-14492786 ] Christopher L. Shannon edited comment on AMQ-5712 at 4/13/15 6:23 PM

[jira] [Commented] (AMQ-5712) Broker can deadlock when using queues while producers wait on disk space

[ https://issues.apache.org/jira/browse/AMQ-5712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14492786#comment-14492786 ] Christopher L. Shannon commented on AMQ-5712: - [~paulgale], Our entire issue

[jira] [Created] (AMQ-5719) Add clientId and subscriptionName to all durable-related exceptions and log messages within TopicRegion

Christopher L. Shannon created AMQ-5719: --- Summary: Add clientId and subscriptionName to all durable-related exceptions and log messages within TopicRegion Key: AMQ-5719 URL: https://issues.apache.org/jira

[jira] [Comment Edited] (AMQ-5712) Broker can deadlock when using queues while producers wait on disk space

[ https://issues.apache.org/jira/browse/AMQ-5712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14492786#comment-14492786 ] Christopher L. Shannon edited comment on AMQ-5712 at 4/13/15 6:24 PM

[jira] [Commented] (AMQ-5712) Broker can deadlock when using queues while producers wait on disk space

[ https://issues.apache.org/jira/browse/AMQ-5712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14492612#comment-14492612 ] Christopher L. Shannon commented on AMQ-5712: - Timothy, I just pushed up my

[jira] [Commented] (AMQ-5712) Broker can deadlock when using queues while producers wait on disk space

[ https://issues.apache.org/jira/browse/AMQ-5712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14485821#comment-14485821 ] Christopher L. Shannon commented on AMQ-5712: - I just submitted a pull request

[jira] [Commented] (AMQ-5712) Broker can deadlock when using queues while producers wait on disk space

[ https://issues.apache.org/jira/browse/AMQ-5712?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14485861#comment-14485861 ] Christopher L. Shannon commented on AMQ-5712: - [~tabish121], sounds good. I

[jira] [Updated] (AMQ-5712) Broker can deadlock when using queues while producers wait on disk space

[ https://issues.apache.org/jira/browse/AMQ-5712?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Christopher L. Shannon updated AMQ-5712: Summary: Broker can deadlock when using queues while producers wait on disk space

[jira] [Created] (AMQ-5712) Broker can deadlock for queues while producers wait on disk space

Christopher L. Shannon created AMQ-5712: --- Summary: Broker can deadlock for queues while producers wait on disk space Key: AMQ-5712 URL: https://issues.apache.org/jira/browse/AMQ-5712 Project

[jira] [Updated] (AMQ-5712) Broker can deadlock when using queues while producers wait on disk space

[ https://issues.apache.org/jira/browse/AMQ-5712?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Christopher L. Shannon updated AMQ-5712: Description: I am experiencing a deadlock when using a Queue with non-persistent

[jira] [Commented] (AMQ-5706) Add persistJMSRedelivered to Topic policies

[ https://issues.apache.org/jira/browse/AMQ-5706?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14394534#comment-14394534 ] Christopher L. Shannon commented on AMQ-5706: - Unfortunately, virtual topics

[jira] [Updated] (AMQ-5706) Add persistJMSRedelivered to Topic policies

[ https://issues.apache.org/jira/browse/AMQ-5706?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Christopher L. Shannon updated AMQ-5706: Description: Currently the property {{persistJMSRedelivered}} can be set for Queue

[jira] [Created] (AMQ-5706) Add persistJMSRedelivered to Topic policies

Christopher L. Shannon created AMQ-5706: --- Summary: Add persistJMSRedelivered to Topic policies Key: AMQ-5706 URL: https://issues.apache.org/jira/browse/AMQ-5706 Project: ActiveMQ Issue

[jira] [Updated] (AMQ-5706) Add persistJMSRedelivered to Topic policies

[ https://issues.apache.org/jira/browse/AMQ-5706?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Christopher L. Shannon updated AMQ-5706: Description: Currently the property {{persistJMSRedelivered}} can be set for Queue

[jira] [Commented] (AMQ-5686) ProxyMessageStore doesn't properly delegate

[ https://issues.apache.org/jira/browse/AMQ-5686?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14379922#comment-14379922 ] Christopher L. Shannon commented on AMQ-5686: - Thanks for taking care of that so

[jira] [Created] (AMQ-5686) ProxyMessageStore doesn't properly delegate

Christopher L. Shannon created AMQ-5686: --- Summary: ProxyMessageStore doesn't properly delegate Key: AMQ-5686 URL: https://issues.apache.org/jira/browse/AMQ-5686 Project: ActiveMQ Issue

[jira] [Updated] (AMQ-5686) ProxyMessageStore doesn't properly delegate

[ https://issues.apache.org/jira/browse/AMQ-5686?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Christopher L. Shannon updated AMQ-5686: Description: In ProxyMessageStore the method {{asyncAddTopicMessage}} does not call

[jira] [Updated] (AMQ-5686) ProxyMessageStore doesn't properly delegate

[ https://issues.apache.org/jira/browse/AMQ-5686?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Christopher L. Shannon updated AMQ-5686: Description: In ProxyMessageStore the method {{asyncAddTopicMessage}} does not call

[jira] [Created] (AMQ-5649) Maximum producers allowed per connection doesn't work for anonymous producers

Christopher L. Shannon created AMQ-5649: --- Summary: Maximum producers allowed per connection doesn't work for anonymous producers Key: AMQ-5649 URL: https://issues.apache.org/jira/browse/AMQ-5649