Qpid JMS 1.4.1 Release Notes
Qpid JMS is a complete Java Message Service 2.0 client built using the Qpid Proton protocol engine.
For more information about this release, including download links and documentation, see the release overview.
Tasks
- QPIDJMS-555 - update to Netty 4.1.72
- QPIDJMS-556 - update test/examples dependencies
Note: QPIDJMS-556 updated from Log4J 2.14.1 to 2.16.0 to pick up its fixes for CVE-2021-44228 and CVE-2021-45046. The qpid-jms-client itself does not have any compile or runtime dependency on Log4J or provide it transitively, so using the qpid-jms-client maven module does not result in use of Log4J. It is however used in the tests and as an example logging framework in the client examples in the download archives. Log4J is also included in the "lib/optional" directory within the apache-qpid-jms-<version>-bin.tar.gz convenience download, though wont be used unless you manually add it to your application classpath to do so. See the Log4J 2 security page for more details of the issues themselves.
Apache Qpid, Messaging built on AMQP; Copyright © 2015 The Apache Software Foundation; Licensed under the Apache License, Version 2.0; Apache Qpid, Qpid, Qpid Proton, Proton, Apache, the Apache feather logo, and the Apache Qpid project logo are trademarks of The Apache Software Foundation; All other marks mentioned may be trademarks or registered trademarks of their respective owners