[ANNOUNCE] ActiveMQ Artemis 2.31.2 released

2023-10-27 Thread Robbie Gemmell
I am pleased to announce the release of ActiveMQ Artemis 2.31.2 Downloads are now available at: https://activemq.apache.org/components/artemis/download/ For a complete list of updates: https://activemq.apache.org/components/artemis/download/release-notes-2.31.2 This is a bug fix release.

CVE-2023-46604: Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

2023-10-27 Thread Christopher L. Shannon
Affected versions: - Apache ActiveMQ 5.18.0 before 5.18.3 - Apache ActiveMQ 5.17.0 before 5.17.6 - Apache ActiveMQ 5.16.0 before 5.16.7 - Apache ActiveMQ before 5.15.16 - Apache ActiveMQ Legacy OpenWire Module 5.18.0 before 5.18.3 - Apache ActiveMQ Legacy OpenWire Module 5.17.0 before 5.17.6 -

Re: [RESULT][VOTE] Release Apache ActiveMQ Artemis 2.31.2

2023-10-27 Thread Robbie Gemmell
Make that 7 binding +1 votes inc a +1 from Jean-Baptiste Onofré On Fri, 27 Oct 2023 at 15:07, Robbie Gemmell wrote: > > The vote passed with 6 binding +1 votes. > > The following votes were received: > > Binding: > +1 Domenico Francesco Bruscino > +1 Clebert Suconic > +1 Robbie Gemmell > +1 Gary

Re: [VOTE] Release Apache ActiveMQ Artemis 2.31.2

2023-10-27 Thread Jean-Baptiste Onofré
+1 (binding) Regards JB On Fri, Oct 27, 2023 at 1:16 PM Robbie Gemmell wrote: > > Hi folks, > > I would like to propose an Apache ActiveMQ Artemis 2.31.2 release. > > This addresses a defect introduced in the recent 2.31.1 release. > > The release notes can be found here: >

[RESULT][VOTE] Release Apache ActiveMQ Artemis 2.31.2

2023-10-27 Thread Robbie Gemmell
The vote passed with 6 binding +1 votes. The following votes were received: Binding: +1 Domenico Francesco Bruscino +1 Clebert Suconic +1 Robbie Gemmell +1 Gary Tully +1 Justin Bertram +1 Timothy Bish Thank you to everyone who contributed and took the time to review the release candidate and

Re: [VOTE] Release Apache ActiveMQ Artemis 2.31.2

2023-10-27 Thread Timothy Bish
On 10/27/23 07:16, Robbie Gemmell wrote: Hi folks, I would like to propose an Apache ActiveMQ Artemis 2.31.2 release. This addresses a defect introduced in the recent 2.31.1 release. The release notes can be found here:

Re: [VOTE] Release Apache ActiveMQ Artemis 2.31.2

2023-10-27 Thread Justin Bertram
+1 Justin On Fri, Oct 27, 2023 at 6:27 AM Robbie Gemmell wrote: > Hi folks, > > I would like to propose an Apache ActiveMQ Artemis 2.31.2 release. > > This addresses a defect introduced in the recent 2.31.1 release. > > The release notes can be found here: > >

Re: [VOTE] Release Apache ActiveMQ Artemis 2.31.2

2023-10-27 Thread Gary Tully
+1 On Fri, 27 Oct 2023 at 12:17, Robbie Gemmell wrote: > Hi folks, > > I would like to propose an Apache ActiveMQ Artemis 2.31.2 release. > > This addresses a defect introduced in the recent 2.31.1 release. > > The release notes can be found here: > >

Re: [VOTE] Release Apache ActiveMQ Artemis 2.31.2

2023-10-27 Thread Robbie Gemmell
On Fri, 27 Oct 2023 at 12:16, Robbie Gemmell wrote: > > Hi folks, > > I would like to propose an Apache ActiveMQ Artemis 2.31.2 release. > > This addresses a defect introduced in the recent 2.31.1 release. > > The release notes can be found here: >

Re: [VOTE] Release Apache ActiveMQ Artemis 2.31.2

2023-10-27 Thread Clebert Suconic
+1 binding On Fri, Oct 27, 2023 at 7:21 AM Domenico Francesco Bruscino < bruscin...@gmail.com> wrote: > +1 (binding) > > * Checked parent version in pom.xml files using `grep -LPrz --include > pom.xml "(.|\n)*2.31.2<\/version>(.|\n)*<\/parent>" ./` > * Ran binary broker instance on Fedora 36

Re: [VOTE] Release Apache ActiveMQ Artemis 2.31.2

2023-10-27 Thread Domenico Francesco Bruscino
+1 (binding) * Checked parent version in pom.xml files using `grep -LPrz --include pom.xml "(.|\n)*2.31.2<\/version>(.|\n)*<\/parent>" ./` * Ran binary broker instance on Fedora 36 using OpenJDK 17 * Checked the web console using `Google Chrome` * Checked producing, browsing and consuming

[VOTE] Release Apache ActiveMQ Artemis 2.31.2

2023-10-27 Thread Robbie Gemmell
Hi folks, I would like to propose an Apache ActiveMQ Artemis 2.31.2 release. This addresses a defect introduced in the recent 2.31.1 release. The release notes can be found here: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12315920=12353776 Source and binary distributions