You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@activemq.apache.org by jb...@apache.org on 2022/06/08 16:03:14 UTC
[activemq-website] branch main updated (d40b49150 -> 0ad5054ef)
This is an automated email from the ASF dual-hosted git repository.
jbertram pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/activemq-website.git
from d40b49150 release notes and commit report for activemq artemis 2.23.0 (supporting vote thread)
new 34e3729e9 Update for CVE-2022-23913
new 0ad5054ef NO-JIRA remove refs to HermesJMS
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
src/components/artemis/security.md | 1 +
src/how-can-i-monitor-activemq.md | 2 --
src/initial-configuration.md | 1 -
src/projects-using-activemq.md | 1 -
.../CVE-2022-23913-announcement.txt | 19 +++++++++++++++++++
src/sitemap.md | 2 --
src/test.md | 1 -
src/version-5-initial-configuration.md | 1 -
src/web-console.md | 2 --
...activemq-is-there-a-way-to-measure-its-progress.md | 2 +-
10 files changed, 21 insertions(+), 11 deletions(-)
create mode 100644 src/security-advisories.data/CVE-2022-23913-announcement.txt
[activemq-website] 02/02: NO-JIRA remove refs to HermesJMS
Posted by jb...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jbertram pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/activemq-website.git
commit 0ad5054ef821c8fba2e5e2534a12f8fc12f130bf
Author: Justin Bertram <jb...@apache.org>
AuthorDate: Wed Jun 8 10:57:09 2022 -0500
NO-JIRA remove refs to HermesJMS
All references to HermesJMS should be removed for the following reasons:
- The project is defunct and hasn't been updated in years.
- It fails to start with Java 8 and 11.
- hermesjms.com redirects to an unrelated advertisement.
---
src/how-can-i-monitor-activemq.md | 2 --
src/initial-configuration.md | 1 -
src/projects-using-activemq.md | 1 -
src/sitemap.md | 2 --
src/test.md | 1 -
src/version-5-initial-configuration.md | 1 -
src/web-console.md | 2 --
...ge-binary-file-to-activemq-is-there-a-way-to-measure-its-progress.md | 2 +-
8 files changed, 1 insertion(+), 11 deletions(-)
diff --git a/src/how-can-i-monitor-activemq.md b/src/how-can-i-monitor-activemq.md
index 816837e25..fcb54ce33 100644
--- a/src/how-can-i-monitor-activemq.md
+++ b/src/how-can-i-monitor-activemq.md
@@ -27,8 +27,6 @@ In ActiveMQ 4.x you can monitor the broker to see what destinations are being us
* [jmxtrans](https://github.com/jmxtrans/jmxtrans) which can be used to continuously query ActiveMQ via JMX and write to a chosen output. For instance, write to a graphite database file which can then be used to graph trends over time and be queried by Nagios to alarm should your thresholds be exceeded.
* [ActiveMQ Monitor (AMon)](http://www.ttmsolutions.com/Transactional_Software_Solutions/Active_Monitor_AMon.php)
* [Apache ActiveMQBrowser](http://sourceforge.net/projects/activemqbrowser/)
-* [HermesJMS](http://www.hermesjms.com/confluence/display/HJMS/Home)
-* [HermesJMS/soapUI](http://www.soapui.org/JMS/working-with-jms-messages.html)
* [Hyperic HQ](http://www.hyperic.com/products/open-source-systems-monitoring) and [Hyperic HQ Enterprise](http://www.hyperic.com/products/enterprise-systems-monitoring)
* [FuseHQ](http://fusesource.com/products/fuse-hq/) (based on Hyperic HQ Enterprise)
* [iTKO LISA Test](http://www.itko.com/products/jms.jsp)
diff --git a/src/initial-configuration.md b/src/initial-configuration.md
index a97a883d4..3f35233a3 100644
--- a/src/initial-configuration.md
+++ b/src/initial-configuration.md
@@ -75,7 +75,6 @@ Additional Resources
* [Apache Camel](http://camel.apache.org)
* [Apache Geronimo](http://geronimo.apache.org/)
-* [Hermes JMS](http://www.hermesjms.com/)
* [Stomp](http://stomp.github.com/) is an open wire protocol (similar to HTTP) for communicating with MOMs from different languages. It has clients for languages like C, C#, Python, Perl, Ruby etc.
* [XBean](http://xbean.org/) is used as the default XML configuration mechanism for ActiveMQ
diff --git a/src/projects-using-activemq.md b/src/projects-using-activemq.md
index 523585a56..2efd5084d 100644
--- a/src/projects-using-activemq.md
+++ b/src/projects-using-activemq.md
@@ -15,5 +15,4 @@ type: activemq5
* [Apache TomEE](http://openejb.apache.org) ActiveMQ is the default JMS provider.
* [Eclipse](http://www.eclipse.org/) is integrating ActiveMQ into the real time editing features for team development
* [Mule](https://www.mulesoft.com/) is an Enterprise Service Bus (ESB) messaging framework. It is a scalable, highly distributable object broker that can seamlessly handle interactions with services and applications using disparate transport and messaging technologies.
-* [Hermes](https://sourceforge.net/projects/hermesjms/) is a Swing application that allows you to interact with JMS providers. Hermes will work with any JMS enabled transport making it easy to browse or seach queues and topics, copy (via drag and drop) messages and delete them.
diff --git a/src/sitemap.md b/src/sitemap.md
index c7d63b918..a150620d8 100644
--- a/src/sitemap.md
+++ b/src/sitemap.md
@@ -494,8 +494,6 @@ Connectivity
Tools
-----
-* [Hermes Jms](hermes-jms)
-* [Hermes Screenshot](hermes-screenshot)
* [Java Service Wrapper](java-service-wrapper)
* [Maven2 ActiveMQ Broker Plugin](maven2-activemq-broker-plugin)
* [Web Console](web-console)
diff --git a/src/test.md b/src/test.md
index 1765a5eb7..87c086cf2 100644
--- a/src/test.md
+++ b/src/test.md
@@ -125,7 +125,6 @@ TEST BLOG
* [Web Console](ToolsTools/Tools/web-console.md "Web Console")
-* [Hermes Jms](ToolsTools/Tools/hermes-Community/FAQ/jms.md "Hermes Jms")
* [Maven2 Performance Plugin](Performance/activemq-performance-module-users-manual.md "ActiveMQ Performance Module Users Manual")
* [JMeter](http://jakarta.apache.org/jmeter)
diff --git a/src/version-5-initial-configuration.md b/src/version-5-initial-configuration.md
index 6f6b8ce6a..64f234a35 100644
--- a/src/version-5-initial-configuration.md
+++ b/src/version-5-initial-configuration.md
@@ -74,7 +74,6 @@ Additional resources
### Related open source projects
* [Apache Geronimo](http://geronimo.apache.org/)
-* [Hermes JMS](http://www.hermesjms.com/)
* [Jencks](http://jencks.org/) is a Spring JCA container allowing you to use connection & thread & POJO pooling for consuming JMS in highly concurrent servers
* [Lingo](http://lingo.codehaus.org/) is a Spring/POJO remoting layer for JMS. It allows you to reuse all the power of JMS from your POJOs without using any of the JMS APIs directly
* [Spring](http://www.springframework.org/)
diff --git a/src/web-console.md b/src/web-console.md
index ac69c873c..6b10b4d17 100644
--- a/src/web-console.md
+++ b/src/web-console.md
@@ -104,5 +104,3 @@ External Project|Description
---|---
[hawtio](http://hawt.io/)|hawtio is an open source HTML5 web application for visualising, managing, tracing and debugging Camel routes & endpoints, ActiveMQ brokers, JMX, OSGi and logging. Here is a [blog entry](http://www.bennet-schulz.com/2016/07/apache-activemq-and-hawtio.html) how to install hawtio as web console for ActiveMQ.
[RHQ](http://www.jboss.org/rhq)|RHQ is an open source operational monitoring tool which has support for Apache Camel (along with other Apache projects like Tomcat, httpd, ActiveMQ etc)
-[Hermes JMS](http://www.hermesjms.com/confluence/display/HJMS/Home)|HermesJMS is an extensible console that helps you interact with JMS providers making it simple to publish and edit messages, browse or seach queues and topics, copy messages around and delete them.
-
diff --git a/src/while-posting-large-binary-file-to-activemq-is-there-a-way-to-measure-its-progress.md b/src/while-posting-large-binary-file-to-activemq-is-there-a-way-to-measure-its-progress.md
index 2113a38e3..be4020e54 100644
--- a/src/while-posting-large-binary-file-to-activemq-is-there-a-way-to-measure-its-progress.md
+++ b/src/while-posting-large-binary-file-to-activemq-is-there-a-way-to-measure-its-progress.md
@@ -8,5 +8,5 @@ type: activemq5
[FAQ](faq) > [Using Apache ActiveMQ](using-apache-activemq) > [While posting large binary file to activeMQ, is there a way to measure its progress](while-posting-large-binary-file-to-activemq-is-there-a-way-to-measure-its-progress)
-If you are using the [JMS Streams](jms-streams) feature with 4.x of ActiveMQ you'd be able to watch the progress in a JMX console or HermesJMS by looking at the queue depths; each large 1Gb file is split into individual JMS messages so you can monitor queue depth etc to track progress
+If you are using the [JMS Streams](jms-streams) feature with 4.x of ActiveMQ you'd be able to watch the progress in a JMX console by looking at the queue depths; each large 1Gb file is split into individual JMS messages so you can monitor queue depth etc to track progress
[activemq-website] 01/02: Update for CVE-2022-23913
Posted by jb...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
jbertram pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/activemq-website.git
commit 34e3729e9c76eff033865acddeb03975e4057a0e
Author: Justin Bertram <jb...@apache.org>
AuthorDate: Thu Feb 3 14:10:41 2022 -0600
Update for CVE-2022-23913
---
src/components/artemis/security.md | 1 +
.../CVE-2022-23913-announcement.txt | 19 +++++++++++++++++++
2 files changed, 20 insertions(+)
diff --git a/src/components/artemis/security.md b/src/components/artemis/security.md
index 468d52a2f..41d704e87 100644
--- a/src/components/artemis/security.md
+++ b/src/components/artemis/security.md
@@ -9,6 +9,7 @@ Details of security problems fixed in released versions of Apache ActiveMQ Artem
See the main [Security Advisories](../../security-advisories) page for details for other components and general information such as reporting new security issues.
+* [CVE-2022-23913](../../security-advisories.data/CVE-2022-23913-announcement.txt) - Apache ActiveMQ Artemis DoS
* [CVE-2021-26117](../../security-advisories.data/CVE-2021-26117-announcement.txt) - ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind
* [CVE-2021-26118](../../security-advisories.data/CVE-2021-26118-announcement.txt) - Flaw in ActiveMQ Artemis OpenWire support
* [CVE-2020-13932](../../security-advisories.data/CVE-2020-13932-announcement.txt) - Apache ActiveMQ Artemis - Remote XSS in Web console Diagram Plugin
diff --git a/src/security-advisories.data/CVE-2022-23913-announcement.txt b/src/security-advisories.data/CVE-2022-23913-announcement.txt
new file mode 100644
index 000000000..9ef157698
--- /dev/null
+++ b/src/security-advisories.data/CVE-2022-23913-announcement.txt
@@ -0,0 +1,19 @@
+Apache ActiveMQ Artemis DoS (CVE-2022-23913)
+PRODUCT AFFECTED:
+This issue affects Apache ActiveMQ Artemis.
+
+PROBLEM:
+In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through uncontrolled resource consumption of memory.
+
+This issue has been assigned CVE-2022-23913.
+
+This issue is being tracked as https://issues.apache.org/jira/browse/ARTEMIS-3593.
+
+WORKAROUND:
+Upgrade to Apache ActiveMQ Artemis 2.20.0 or 2.19.1 (if you're still using Java 8).
+
+MODIFICATION HISTORY:
+: Initial Publication.
+RELATED LINKS:
+CVE-2022-23913 at cve.mitre.org
+