You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@james.apache.org by rc...@apache.org on 2020/12/11 10:44:10 UTC

[james-project] 06/15: JAMES-2578 Document upgrade-instructions

This is an automated email from the ASF dual-hosted git repository.

rcordier pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/james-project.git

commit ac24814d31d01d0879642819a11285375a2ff8a6
Author: Benoit Tellier <bt...@linagora.com>
AuthorDate: Mon Dec 7 14:55:38 2020 +0700

    JAMES-2578 Document upgrade-instructions
---
 upgrade-instructions.md | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/upgrade-instructions.md b/upgrade-instructions.md
index 7918bea..dca2f21 100644
--- a/upgrade-instructions.md
+++ b/upgrade-instructions.md
@@ -22,6 +22,27 @@ Change list:
  - [Swift support has been dropped](#swift-support-has-been-dropped)
  - [Cassandra Schema update to V8](#cassandra-schema-update-to-v8)
  - [Cassandra Schema update to V9](#cassandra-schema-update-to-v9)
+ - [Cassandra Schema update to V10](#cassandra-schema-update-to-v10)
+ - [JMS mail queue no longer relies on java serialization](#jms-mail-queue-no-longer-relies-on-java-serialization)
+
+### JMS mail queue no longer relies on java serialization
+
+Date: 07/12/2020
+
+JIRA: https://issues.apache.org/jira/browse/JAMES-2578
+
+Concerned products: Spring server, JPA Guice servers, Cassandra Guice server (without rabbitMQ)
+
+Java serialization is unsafe and leads to countless vulnerability issues. We removed the remaining usages as part of the
+JMS and ActiveMQ mail queues.
+
+In order to do so, we introduced a breaking change in the message format.
+
+Upgrades should be done with an empty mail queue. To do so:
+ - Switch off incoming SMTP + JMAP traffic (external load balancing or restarting with dis-activated SMTP service)
+ - Flush your MailQueues
+ - Await the mail processing to finish, monitoring the size of your mail queue
+ - Upgrade, then restart SMTP + JMAP traffic
 
 ### Cassandra Schema update to V10
 


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For additional commands, e-mail: notifications-help@james.apache.org