Artemis 2.57.0 Release Notes

• A list of commits.

• Please see the “Versions” chapter in the User Guide for upgrade instructions.

Note: As part of establishing Apache Artemis as an independent project, the Maven groupId has switched to org.apache.artemis.

Note: This release requires use of Java 17 or above.

Bugs Fixed

• ARTEMIS-6243 - Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation
• ARTEMIS-6244 - Pre-Authentication Information Disclosure in CORE Protocol Topology Subscription
• ARTEMIS-6245 - Missing authentication on CORE protocol session reattachment
• ARTEMIS-6246 - Pre-Authentication Cluster Credential Exposure to Discovered Peers
• ARTEMIS-6247 - Message-based management parameter deserialization may lead to denial of service
• ARTEMIS-6248 - Pre-authentication Openwire protocol handling can result in queue deletion
• ARTEMIS-6249 - Limiting Wildcards (%) on selectors

Tasks

• ARTEMIS-6125 - Convert examples to static connectors
• ARTEMIS-6203 - Make MQTT resiliency soak tests more robust