You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@activemq.apache.org by Jean-Baptiste Onofré <jb...@nanthrax.net> on 2026/09/22 04:39:17 UTC
[VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Hi everyone,
I propose Apache ActiveMQ 6.2.10 (rc0) release for your vote.
This release includes:
- Downgrade to Camel 4.18.4 to align Spring versions between ActiveMQ and
Camel
You can review the Pre-Release Notes for details:
https://github.com/apache/activemq/releases/tag/activemq-6.2.10
Staging Maven Repository:
https://repository.apache.org/content/repositories/orgapacheactivemq-1544/
Staging Dist Repository:
https://dist.apache.org/repos/dist/dev/activemq/activemq/6.2.10/
Git tag:
https://github.com/apache/activemq/tree/activemq-6.2.10
Please vote to approve this release:
[ ] +1 Approve the release
[ ] 0 I don't care
[ ] -1 Don't approve the release (please provide specific comment)
This vote will be open for at least 72 hours.
Thanks!
Regards
JB
Re: [VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Loris Boiteux <lo...@gmail.com>.
+1 (non-binding)
Cheers
Le mar. 22 sept. 2026 à 19:36, Christopher Shannon <
christopher.l.shannon@gmail.com> a écrit :
> +1 (binding)
>
> * Validated signatures and checksums
> * Verified license and notice files in archives
> * Checked source license headers with 'mvn apache-rat:check'
> * Ran the broker from the binary archive and exercised the web console
>
> On Tue, Sep 22, 2026 at 12:39 AM Jean-Baptiste Onofré <jb...@nanthrax.net>
> wrote:
> >
> > Hi everyone,
> >
> > I propose Apache ActiveMQ 6.2.10 (rc0) release for your vote.
> >
> > This release includes:
> > - Downgrade to Camel 4.18.4 to align Spring versions between ActiveMQ and
> > Camel
> >
> > You can review the Pre-Release Notes for details:
> > https://github.com/apache/activemq/releases/tag/activemq-6.2.10
> >
> > Staging Maven Repository:
> >
> https://repository.apache.org/content/repositories/orgapacheactivemq-1544/
> >
> > Staging Dist Repository:
> > https://dist.apache.org/repos/dist/dev/activemq/activemq/6.2.10/
> >
> > Git tag:
> > https://github.com/apache/activemq/tree/activemq-6.2.10
> >
> > Please vote to approve this release:
> > [ ] +1 Approve the release
> > [ ] 0 I don't care
> > [ ] -1 Don't approve the release (please provide specific comment)
> >
> > This vote will be open for at least 72 hours.
> >
> > Thanks!
> > Regards
> > JB
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
> For additional commands, e-mail: dev-help@activemq.apache.org
> For further information, visit: https://activemq.apache.org/contact
>
>
>
Re: [VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Christopher Shannon <ch...@gmail.com>.
+1 (binding)
* Validated signatures and checksums
* Verified license and notice files in archives
* Checked source license headers with 'mvn apache-rat:check'
* Ran the broker from the binary archive and exercised the web console
On Tue, Sep 22, 2026 at 12:39 AM Jean-Baptiste Onofré <jb...@nanthrax.net> wrote:
>
> Hi everyone,
>
> I propose Apache ActiveMQ 6.2.10 (rc0) release for your vote.
>
> This release includes:
> - Downgrade to Camel 4.18.4 to align Spring versions between ActiveMQ and
> Camel
>
> You can review the Pre-Release Notes for details:
> https://github.com/apache/activemq/releases/tag/activemq-6.2.10
>
> Staging Maven Repository:
> https://repository.apache.org/content/repositories/orgapacheactivemq-1544/
>
> Staging Dist Repository:
> https://dist.apache.org/repos/dist/dev/activemq/activemq/6.2.10/
>
> Git tag:
> https://github.com/apache/activemq/tree/activemq-6.2.10
>
> Please vote to approve this release:
> [ ] +1 Approve the release
> [ ] 0 I don't care
> [ ] -1 Don't approve the release (please provide specific comment)
>
> This vote will be open for at least 72 hours.
>
> Thanks!
> Regards
> JB
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
For additional commands, e-mail: dev-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [RESULT][VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Matt Pavlovich <ma...@apache.org>.
Hi Nacho-
Thank you for the follow up! Glad to hear the upgrade is done, and you are converted to the new jetty configuration approach. I believe that having ActiveMQ follow the upstream Jetty-style for configuration will serve everyone better going forward, so glad to hear that is in place for you.
Thanks!
Matt Pavlovich
> On Oct 7, 2026, at 1:33 AM, Nacho Barrientos via dev <de...@activemq.apache.org> wrote:
>
> Hi Matt, all,
>
> On 27/09/26, Matt Pavlovich said:
>> Sounds good, let us know if you have any hiccups with the upgrade. For
>> sure look into the changes related to Jetty if you use the console
>> and/or REST APIs.
>>
>> The new Jetty configuration approach in 6.3.x is hardened to use
>> native Jetty configuration files instead of mapping Jetty setup using
>> Spring. This will be easier to maintain and ensure proper security
>> hardening going forward.
>
> Many thanks for the heads-up. We completed the upgrade yesterday and
> indeed it's been a bit laborious to prepare as we had to completely
> rewrite and validate again our Jetty configuration.
>
> Anyhoo, everything went fine, I reckon.
>
> With immense gratitude to all the maintainers,
>
> --
> bye
> Nacho
> http://cern.ch/nacho
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
> For additional commands, e-mail: dev-help@activemq.apache.org
> For further information, visit: https://activemq.apache.org/contact
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
For additional commands, e-mail: dev-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [RESULT][VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Nacho Barrientos via dev <de...@activemq.apache.org>.
Hi Matt, all,
On 27/09/26, Matt Pavlovich said:
> Sounds good, let us know if you have any hiccups with the upgrade. For
> sure look into the changes related to Jetty if you use the console
> and/or REST APIs.
>
> The new Jetty configuration approach in 6.3.x is hardened to use
> native Jetty configuration files instead of mapping Jetty setup using
> Spring. This will be easier to maintain and ensure proper security
> hardening going forward.
Many thanks for the heads-up. We completed the upgrade yesterday and
indeed it's been a bit laborious to prepare as we had to completely
rewrite and validate again our Jetty configuration.
Anyhoo, everything went fine, I reckon.
With immense gratitude to all the maintainers,
--
bye
Nacho
http://cern.ch/nacho
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
For additional commands, e-mail: dev-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [RESULT][VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Matt Pavlovich <ma...@apache.org>.
> On Sep 27, 2026, at 5:39 AM, Nacho Barrientos via dev <de...@activemq.apache.org> wrote:
>
> Not at all, it's just that our validation procedures for a patch version
> bump are more lightweight than those for a minor version bump so it
> would have been more straightforward to get that CVE patched if it had
> been included in 6.2.10.
>
Sounds good, let us know if you have any hiccups with the upgrade. For sure look into the changes related to Jetty if you use the console and/or REST APIs.
The new Jetty configuration approach in 6.3.x is hardened to use native Jetty configuration files instead of mapping Jetty setup using Spring. This will be easier to maintain and ensure proper security hardening going forward.
Thanks,
Matt Pavlovich
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
For additional commands, e-mail: dev-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [RESULT][VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Nacho Barrientos via dev <de...@activemq.apache.org>.
Hi Matt,
Thanks for your message.
On 26/09/26, Matt Pavlovich said:
> This v6.2.10 release is an unplanned fix release to solve for the
> incompatible Apache Camel version that was inadvertently included.
I see. No worries, I was just naively hoping that you would have
considered including the patch as you were going to release a new 6.2
anyway :)
> Your best course of action is to upgrade to the latest in the v6.3.x
> series, which is compatible and provides the CVE fix you are asking
> about.
>
> Is there a reason upgrading to a v6.3.x release is problematic for
> your environment?
Not at all, it's just that our validation procedures for a patch version
bump are more lightweight than those for a minor version bump so it
would have been more straightforward to get that CVE patched if it had
been included in 6.2.10.
Thanks again and best wishes,
--
bye
Nacho
http://cern.ch/nacho
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
For additional commands, e-mail: dev-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [RESULT][VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Matt Pavlovich <ma...@apache.org>.
Hello Nacho-
This v6.2.10 release is an unplanned fix release to solve for the incompatible Apache Camel version that was inadvertently included.
The v6.2.x release stream is inactive, due to its reliance on out-dated (and EOL) core dependencies (Jetty, Spring ,etc).
Your best course of action is to upgrade to the latest in the v6.3.x series, which is compatible and provides the CVE fix you are asking about.
Is there a reason upgrading to a v6.3.x release is problematic for your environment?
Thanks,
Matt Pavlovich
Apache ActiveMQ PMC
> On Sep 26, 2026, at 3:41 AM, Nacho Barrientos via dev <de...@activemq.apache.org> wrote:
>
> Hi,
>
> Sorry for sticking my oar in.
>
> May I please ask if the patch for CVE-2026-74761 [0] is shipped in this
> release?
>
> Thanks.
>
> [0] https://www.openwall.com/lists/oss-security/2026/09/08/12
>
> On 26/09/26, Jean-Baptiste Onofré said:
>
>> Hi,
>>
>> This vote passed with the following result:
>>
>> +1 (binding): Chris Shannon, JB Onofré, Matt Pavlovich
>> +1 (non binding): Loris Boiteux, Jamie Goodyear, Jean-Louis Monteiro
>>
>> I'm promoting the artifacts on dist and Maven Central, I will publish the
>> release on website and GitHub and I will make the announcement.
>>
>> Thanks everyone for your vote!
>>
>> Regards
>> JB
>>
>> On Tue, Sep 22, 2026 at 6:39 AM Jean-Baptiste Onofré <jb...@nanthrax.net>
>> wrote:
>>
>>> Hi everyone,
>>>
>>> I propose Apache ActiveMQ 6.2.10 (rc0) release for your vote.
>>>
>>> This release includes:
>>> - Downgrade to Camel 4.18.4 to align Spring versions between ActiveMQ and
>>> Camel
>>>
>>> You can review the Pre-Release Notes for details:
>>> https://github.com/apache/activemq/releases/tag/activemq-6.2.10
>>>
>>> Staging Maven Repository:
>>> https://repository.apache.org/content/repositories/orgapacheactivemq-1544/
>>>
>>> Staging Dist Repository:
>>> https://dist.apache.org/repos/dist/dev/activemq/activemq/6.2.10/
>>>
>>> Git tag:
>>> https://github.com/apache/activemq/tree/activemq-6.2.10
>>>
>>> Please vote to approve this release:
>>> [ ] +1 Approve the release
>>> [ ] 0 I don't care
>>> [ ] -1 Don't approve the release (please provide specific comment)
>>>
>>> This vote will be open for at least 72 hours.
>>>
>>> Thanks!
>>> Regards
>>> JB
>>>
>
> --
> bye
> Nacho
> http://cern.ch/nacho
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
> For additional commands, e-mail: dev-help@activemq.apache.org
> For further information, visit: https://activemq.apache.org/contact
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
For additional commands, e-mail: dev-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [RESULT][VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Nacho Barrientos via dev <de...@activemq.apache.org>.
Hi,
Sorry for sticking my oar in.
May I please ask if the patch for CVE-2026-74761 [0] is shipped in this
release?
Thanks.
[0] https://www.openwall.com/lists/oss-security/2026/09/08/12
On 26/09/26, Jean-Baptiste Onofré said:
> Hi,
>
> This vote passed with the following result:
>
> +1 (binding): Chris Shannon, JB Onofré, Matt Pavlovich
> +1 (non binding): Loris Boiteux, Jamie Goodyear, Jean-Louis Monteiro
>
> I'm promoting the artifacts on dist and Maven Central, I will publish the
> release on website and GitHub and I will make the announcement.
>
> Thanks everyone for your vote!
>
> Regards
> JB
>
> On Tue, Sep 22, 2026 at 6:39 AM Jean-Baptiste Onofré <jb...@nanthrax.net>
> wrote:
>
>> Hi everyone,
>>
>> I propose Apache ActiveMQ 6.2.10 (rc0) release for your vote.
>>
>> This release includes:
>> - Downgrade to Camel 4.18.4 to align Spring versions between ActiveMQ and
>> Camel
>>
>> You can review the Pre-Release Notes for details:
>> https://github.com/apache/activemq/releases/tag/activemq-6.2.10
>>
>> Staging Maven Repository:
>> https://repository.apache.org/content/repositories/orgapacheactivemq-1544/
>>
>> Staging Dist Repository:
>> https://dist.apache.org/repos/dist/dev/activemq/activemq/6.2.10/
>>
>> Git tag:
>> https://github.com/apache/activemq/tree/activemq-6.2.10
>>
>> Please vote to approve this release:
>> [ ] +1 Approve the release
>> [ ] 0 I don't care
>> [ ] -1 Don't approve the release (please provide specific comment)
>>
>> This vote will be open for at least 72 hours.
>>
>> Thanks!
>> Regards
>> JB
>>
--
bye
Nacho
http://cern.ch/nacho
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
For additional commands, e-mail: dev-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
[RESULT][VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Jean-Baptiste Onofré <jb...@nanthrax.net>.
Hi,
This vote passed with the following result:
+1 (binding): Chris Shannon, JB Onofré, Matt Pavlovich
+1 (non binding): Loris Boiteux, Jamie Goodyear, Jean-Louis Monteiro
I'm promoting the artifacts on dist and Maven Central, I will publish the
release on website and GitHub and I will make the announcement.
Thanks everyone for your vote!
Regards
JB
On Tue, Sep 22, 2026 at 6:39 AM Jean-Baptiste Onofré <jb...@nanthrax.net>
wrote:
> Hi everyone,
>
> I propose Apache ActiveMQ 6.2.10 (rc0) release for your vote.
>
> This release includes:
> - Downgrade to Camel 4.18.4 to align Spring versions between ActiveMQ and
> Camel
>
> You can review the Pre-Release Notes for details:
> https://github.com/apache/activemq/releases/tag/activemq-6.2.10
>
> Staging Maven Repository:
> https://repository.apache.org/content/repositories/orgapacheactivemq-1544/
>
> Staging Dist Repository:
> https://dist.apache.org/repos/dist/dev/activemq/activemq/6.2.10/
>
> Git tag:
> https://github.com/apache/activemq/tree/activemq-6.2.10
>
> Please vote to approve this release:
> [ ] +1 Approve the release
> [ ] 0 I don't care
> [ ] -1 Don't approve the release (please provide specific comment)
>
> This vote will be open for at least 72 hours.
>
> Thanks!
> Regards
> JB
>
Re: [VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Jean-Louis Monteiro <jl...@tomitribe.com>.
+1
--
Jean-Louis Monteiro
http://twitter.com/jlouismonteiro
http://www.tomitribe.com
On Wed, Sep 23, 2026 at 4:42 PM Jamie G. <ja...@gmail.com> wrote:
> +1
>
> cheers,
> Jamie
>
> On Wed, Sep 23, 2026 at 8:32 AM Matt Pavlovich <ma...@apache.org>
> wrote:
> >
> > +1 binding
> >
> > > On Sep 21, 2026, at 11:39 PM, Jean-Baptiste Onofré <jb...@nanthrax.net>
> wrote:
> > >
> > > Hi everyone,
> > >
> > > I propose Apache ActiveMQ 6.2.10 (rc0) release for your vote.
> > >
> > > This release includes:
> > > - Downgrade to Camel 4.18.4 to align Spring versions between ActiveMQ
> and
> > > Camel
> > >
> > > You can review the Pre-Release Notes for details:
> > > https://github.com/apache/activemq/releases/tag/activemq-6.2.10
> > >
> > > Staging Maven Repository:
> > >
> https://repository.apache.org/content/repositories/orgapacheactivemq-1544/
> > >
> > > Staging Dist Repository:
> > > https://dist.apache.org/repos/dist/dev/activemq/activemq/6.2.10/
> > >
> > > Git tag:
> > > https://github.com/apache/activemq/tree/activemq-6.2.10
> > >
> > > Please vote to approve this release:
> > > [ ] +1 Approve the release
> > > [ ] 0 I don't care
> > > [ ] -1 Don't approve the release (please provide specific comment)
> > >
> > > This vote will be open for at least 72 hours.
> > >
> > > Thanks!
> > > Regards
> > > JB
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
> > For additional commands, e-mail: dev-help@activemq.apache.org
> > For further information, visit: https://activemq.apache.org/contact
> >
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
> For additional commands, e-mail: dev-help@activemq.apache.org
> For further information, visit: https://activemq.apache.org/contact
>
>
>
Re: [VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by "Jamie G." <ja...@gmail.com>.
+1
cheers,
Jamie
On Wed, Sep 23, 2026 at 8:32 AM Matt Pavlovich <ma...@apache.org> wrote:
>
> +1 binding
>
> > On Sep 21, 2026, at 11:39 PM, Jean-Baptiste Onofré <jb...@nanthrax.net> wrote:
> >
> > Hi everyone,
> >
> > I propose Apache ActiveMQ 6.2.10 (rc0) release for your vote.
> >
> > This release includes:
> > - Downgrade to Camel 4.18.4 to align Spring versions between ActiveMQ and
> > Camel
> >
> > You can review the Pre-Release Notes for details:
> > https://github.com/apache/activemq/releases/tag/activemq-6.2.10
> >
> > Staging Maven Repository:
> > https://repository.apache.org/content/repositories/orgapacheactivemq-1544/
> >
> > Staging Dist Repository:
> > https://dist.apache.org/repos/dist/dev/activemq/activemq/6.2.10/
> >
> > Git tag:
> > https://github.com/apache/activemq/tree/activemq-6.2.10
> >
> > Please vote to approve this release:
> > [ ] +1 Approve the release
> > [ ] 0 I don't care
> > [ ] -1 Don't approve the release (please provide specific comment)
> >
> > This vote will be open for at least 72 hours.
> >
> > Thanks!
> > Regards
> > JB
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
> For additional commands, e-mail: dev-help@activemq.apache.org
> For further information, visit: https://activemq.apache.org/contact
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
For additional commands, e-mail: dev-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Matt Pavlovich <ma...@apache.org>.
+1 binding
> On Sep 21, 2026, at 11:39 PM, Jean-Baptiste Onofré <jb...@nanthrax.net> wrote:
>
> Hi everyone,
>
> I propose Apache ActiveMQ 6.2.10 (rc0) release for your vote.
>
> This release includes:
> - Downgrade to Camel 4.18.4 to align Spring versions between ActiveMQ and
> Camel
>
> You can review the Pre-Release Notes for details:
> https://github.com/apache/activemq/releases/tag/activemq-6.2.10
>
> Staging Maven Repository:
> https://repository.apache.org/content/repositories/orgapacheactivemq-1544/
>
> Staging Dist Repository:
> https://dist.apache.org/repos/dist/dev/activemq/activemq/6.2.10/
>
> Git tag:
> https://github.com/apache/activemq/tree/activemq-6.2.10
>
> Please vote to approve this release:
> [ ] +1 Approve the release
> [ ] 0 I don't care
> [ ] -1 Don't approve the release (please provide specific comment)
>
> This vote will be open for at least 72 hours.
>
> Thanks!
> Regards
> JB
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@activemq.apache.org
For additional commands, e-mail: dev-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact
Re: [VOTE] Apache ActiveMQ 6.2.10 release (rc0)
Posted by Jean-Baptiste Onofré <jb...@nanthrax.net>.
+1 (binding)
Regards
JB
On Tue, Sep 22, 2026 at 6:39 AM Jean-Baptiste Onofré <jb...@nanthrax.net>
wrote:
> Hi everyone,
>
> I propose Apache ActiveMQ 6.2.10 (rc0) release for your vote.
>
> This release includes:
> - Downgrade to Camel 4.18.4 to align Spring versions between ActiveMQ and
> Camel
>
> You can review the Pre-Release Notes for details:
> https://github.com/apache/activemq/releases/tag/activemq-6.2.10
>
> Staging Maven Repository:
> https://repository.apache.org/content/repositories/orgapacheactivemq-1544/
>
> Staging Dist Repository:
> https://dist.apache.org/repos/dist/dev/activemq/activemq/6.2.10/
>
> Git tag:
> https://github.com/apache/activemq/tree/activemq-6.2.10
>
> Please vote to approve this release:
> [ ] +1 Approve the release
> [ ] 0 I don't care
> [ ] -1 Don't approve the release (please provide specific comment)
>
> This vote will be open for at least 72 hours.
>
> Thanks!
> Regards
> JB
>