You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@oozie.apache.org by "Mate Juhasz (JIRA)" <ji...@apache.org> on 2018/05/07 09:27:00 UTC

[jira] [Created] (OOZIE-3235) Old ActiveMQ dependency in Oozie

Mate Juhasz created OOZIE-3235:
----------------------------------

             Summary: Old ActiveMQ dependency in Oozie
                 Key: OOZIE-3235
                 URL: https://issues.apache.org/jira/browse/OOZIE-3235
             Project: Oozie
          Issue Type: Bug
          Components: client
    Affects Versions: 5.1.0
            Reporter: Mate Juhasz
            Assignee: Mate Juhasz
             Fix For: 5.1.0


An old, and vulnerable version of ActiveMQ is used by Oozie's tests (5.13.3).
It seems that the jars are even included in the oozie-client with "compile" scope, but we only use them in unit tests.

Oozie-client uses the JMS-API only from these jars, which could be included separately (javax.jms).

The version could be upgraded to 5.14.2 and the scope changed to "test" instead of "compile".



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)