activemq (5.17.6+dfsg-2ubuntu1) stonking; urgency=medium

  * Migrate from SysV init script to systemd template service unit
    (activemq@.service). (LP: #2153821)
    - Use StateDirectory= for data directory creation and ownership instead
      of ExecStartPre with mkdir/chown, which ran as the unprivileged
      activemq user and would fail on first start.
    - Add Restart=on-failure to restart the broker on unexpected crashes.
    - Make the config file path explicit in ExecStart.
  * Remove init-script-specific variables (ACTIVEMQ_USER, DIETIME) from
    /etc/default/activemq; user/group handling is now done by the unit file.
  * Add automatic migration of existing instances: on upgrade, any instance
    previously enabled via /etc/activemq/instances-enabled/ is automatically
    enabled and started as a systemd unit (activemq@<instance>.service).
    The old sysvinit init script is disabled during the upgrade.
  * Update debian/activemq.README.Debian to document the migration from
    SysV init to systemd and update all instance management instructions.
  * Drop unused /var/lib/activemq/data from activemq.dirs; per-instance data
    is managed by the unit's StateDirectory=.
  * Add autopkgtest:
    - service-smoke: test systemd service start/stop lifecycle, including a
      port-61616 readiness check so the test validates the broker actually
      boots (not just that the wrapper script forks).
    - broker-connectivity: test broker accepts TCP connections on port 61616,
      with 90s timeouts and a dump of /var/lib/activemq/main/data/activemq.log
      on failure (the broker logs to log4j2, not journald).
    - instance-migration: test that enabled instances are migrated to
      systemd units.

 -- Eduardo Barretto <eduardo.barretto@canonical.com>  Wed, 17 Jun 2026 10:40:27 +0200

activemq (5.17.6+dfsg-2) unstable; urgency=medium

  [ Pierre Gruet ]
  * Removing the patch about missing Maven artifact as libxstream-java now
    properly declares the classpath of its jar

  [Emmanuel Arias]
  * CVE-2025-27533: Avoid memory allocation with excessive size value during
    unmarshalling of OpenWire commands. The size value of buffers was not
    properly validated which could lead to excessive memory allocation
    and be exploited to cause a denial of service (Closes: #1104933).
    - d/control: Add libjavassist-java as build dependency. It is needed for
    the patch.
  * d/control: Add myself as uploaders.

 -- Emmanuel Arias <eamanu@debian.org>  Thu, 29 May 2025 16:29:53 -0300

activemq (5.17.6+dfsg-1) unstable; urgency=medium

  * Team upload.
  * New upstream version 5.17.6+dfsg
    Addresses CVE-2023-46604 (Closes: #1054909)
  * Refresh patches for new upstream release
  * Update debian/maven.ignoreRules to ignore:
    - org.apache.geronimo.genesis.plugins:tools-maven-plugin
    - org.apache.activemq:activemq-client:jar:tests

 -- tony mancill <tmancill@debian.org>  Sat, 18 Nov 2023 21:17:22 -0800

activemq (5.17.2+dfsg-2) unstable; urgency=medium

  * Team upload.
  * Ignore org.apache:apache parent pom (Closes: #1028744)
  * Remove Depends on obsolete lsb-base (lintian error)

 -- tony mancill <tmancill@debian.org>  Sun, 12 Feb 2023 07:53:03 -0800

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libactivemq-java`.
