Re: [ANNOUNCE] Apache TomEE 10.1.5
Richard Zowalla <[email protected]> Tue, 5 May 2026 12:32:13 +0200
| Newsgroups | gmane.comp.java.openejb.user |
|---|---|
| Message-ID | <965156BA-63D2-4739-8AD3-7F50E355C651__10346.2294254982$1777977154$gmane$org@apache.org> |
Just replace the related jar files in the distribution. > Am 05.05.2026 um 12:27 schrieb COURTAULT Francois = <[email protected]>: >=20 > THALES GROUP LIMITED DISTRIBUTION to email recipients >=20 > Hello, >=20 > Congrats for this new release =F0=9F=98=8A >=20 > Regarding ActiveMQ, I agree that ActiveMQ 6.2.5 has been released 15 = days after 6.2.4 so quite difficult to integrate in TomEE 10.1.5. > Do you think there is high risk if I update ActiveMQ to 6.2.5 instead = of 6.2.4 (7 jars to update) ? >=20 > Why not integrating neethi 3.2.2 instead of neethi 3.2.1 which fixes 1 = critical CVE: CVE-2026-42403 ? Is it because it hasn't been tag as = Latest ? Same question: high risk if I update neethi 3.2.1 by neethi = 3.2.2 ? >=20 > Best Regards. >=20 > -----Original Message----- > From: Markus Jung <[email protected]> > Sent: mardi 5 mai 2026 10:30 > To: [email protected]; [email protected]; [email protected] > Subject: [ANNOUNCE] Apache TomEE 10.1.5 >=20 > The Apache TomEE team is pleased to announce the general availability = of TomEE 10.1.5 >=20 > Apache TomEE delivers enterprise application containers and services = based on, but not limited to the Enterprise JavaBeans Specification and = Java/Jakarta Enterprise Edition Specifications. >=20 > This release ships fixes related to the implementation of the = @OpenIdAuthenticationMechanismDefinition, fixes an issue with resource = construction, has a small improvement in logging, and features the usual = dependency upgrades. >=20 > Full release notes: https://tomee.apache.org/10.1.5/release-notes.html >=20 > Downloads are available at: https://tomee.apache.org/download.html >=20 > - The Apache TomEE Team >=20 >=20