Aerospike Connect for JMS - Inbound Release Notes

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 17 or later.
  • Note: Starting from this release, the aerospike-jms-inbound connector requires Java runtime 17 or later. This is due to an update of dependent modules that address security vulnerabilities which now require a Java 17 or later runtime.

Security

• [CONNECTOR-1236] - Fixed - Aerospike Connectors - Security vulnerabilities - CVE-2025-0395, CVE-2025-3576, CVE-2025-4802, CVE-2024-8176, CVE-2024-12133, CVE-2024-12243, CVE-2025-32414, CVE-2025-48734

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

Bug Fixes

• [CONNECTOR-1219] - Changed default value of socket-receive-buffer-bytes to null from 32kb, so this is optional configuration validation only if configured.

Security

• [CONNECTOR-1220] - Aerospike Connectors - Security vulnerabilities introduced through libxml2.

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

New Features

• [CONNECTOR-1183] - Use sendTimeout as configured without doubling.
• [CONNECTOR-1184] - Converted transaction debug level messages to trace level.
• [CONNECTOR-1185] - Kotlin version upgraded to 2.x.

Security

• [CONNECTOR-1175] - Updated logback-core to 1.5.15 version to fix CVE-2024-12798, CVE-2024-12801.
• [CONNECTOR-1179] - Updated logback-core to 1.5.15 version to fix CVE-2024-12801.
• [CONNECTOR-1180] - Updated logback-classic to 1.5.15 version to fix CVE-2024-12798.
• [CONNECTOR-1181] - Updated logback-core to 1.5.15 version to fix CVE-2024-12798.
• [CONNECTOR-1188] - Updated io.netty:netty-handler to 4.1.118.Final to fix CVE-2025-24970, CVE-2025-25193, CVE-2024-29025, CVE-2024-47554, CVE-2023-46120 (rabbitmq), CVE-2024-51504 (zookeeper).

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

Security

• [CONNECTOR-1160] - Fixed security vulnerability - Authentication Bypass in krb5-libs.

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

Security

• [CONNECTOR-1149] - Fixed Deserialization of Untrusted Data in org.apache.avro:avro:1.11.3.
• [CONNECTOR-1149] - Fixed Denial of Service (DoS) in com.fasterxml.jackson.core:jackson-core.
• [CONNECTOR-1149] - Fixed Race Condition in io.undertow:undertow-core.
• [CONNECTOR-1149] - Fixed Uncontrolled Resource Consumption in commons-io:commons-io.

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

Security

• [CONNECTOR-1135] - Fix Arbitrary Code Injection affecting platform-python-setuptools & python3-setuptools-wheel.

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

Security

• [CONNECTOR-1105] - Fix Race Condition.
• [CONNECTOR-1108] - Fix Uncontrolled Resource Consumption ('Resource Exhaustion').

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

Security

• [CONNECTOR-975] - Fix Improper Input Validation.
• [CONNECTOR-976] - Fix Infinite loop.
• [CONNECTOR-977] - Fix Uncontrolled Resource Consumption.
• [CONNECTOR-1012] - Fix Out-of-bounds write vulnerabilities.
• [CONNECTOR-1013] - Fix Out-of-bounds write vulnerabilities.
• [CONNECTOR-1014] - Fix Out-of-bounds write vulnerabilities.
• [CONNECTOR-1015] - Fix Out-of-bounds write vulnerabilities.
• [CONNECTOR-1016] - Fix Out-of-bounds write vulnerabilities.

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

Improvements

• Upgraded a few dependencies.

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

Security

• [CONNECTOR-825] - Upgrade netty and gRPC for CVE-2023-44487.

• Breaking change - Custom transformers will not be able to write Java runtime serialized objects as bins to target Aerospike cluster.
• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

Security

• [CONNECTOR-775] - Address CVE-2023-36480 - upgrade to aerospike-java-client version 7.0.0.

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

New Features

• [CONNECTOR-584] - JSON logging format.

Improvements

• [CONNECTOR-716] - Upgrade internal dependencies.

• The *.deb and *.rpm files support multiple architectures (ARM64 & AMD64).
• The connector is Java JVM based. Install the correct JVM for the desired architecture.
• This connector requires Java 11 or later.

Improvements

• [CONNECTOR-562] - Multi-arch container image supporting linux/arm64 and linux/amd64 platforms.
• [CONNECTOR-679] - Upgrade vulnerable dependencies.

• This release has a breaking config changes.

New Features

• [CONNECTOR-345] - Integrate Manage Server in JMS Inbound for exposing connector metrics and Prometheus API.
• [CONNECTOR-346] - Add support for the 'Custom Inbound Transformers' using inbound SDK in JMS Inbound.

Improvements

• [CONNECTOR-347] - Add support for the dynamic field mapping from an incoming JMS message to Aerospike record.

New Features

• [CONNECTOR-185] - Add Boolean particle type support introduced in Aerospike server 5.6.

Bug Fixes

• [CONNECTOR-270] - JMS Inbound connector fails to reconnect to message queue on message queue restart.

Bug Fixes

• [CONNECTOR-44] - JMS Inbound ignores configured TTL for Aerospike.
• [CONNECTOR-45] - JMS Inbound fails to log messages that fail to parse.
• [CONNECTOR-46] - JMS Inbound minimum value of maxConnsPerNode can be 1, but should be 5.

Known Issues

• [CONNECTOR-270] - JMS Inbound connector fails to reconnect to message queue on message queue restart. Fixed in version 1.1.0.

• Initial GA release

Known Issues

• [CONNECTOR-270] - JMS Inbound connector fails to reconnect to message queue on message queue restart. Fixed in version 1.1.0.