2026 Security hardening

List view

feat: Post-quantum TLS via JDK 25

Status: Draft (not ready).

apache/activemqnumber 2595

#2595 In apache/activemq;

· mattrpav opened on Sep 21, 2026

[#1997] jasypt replacement

Status: Open (in progress).

apache/activemqnumber 2580

#2580 In apache/activemq;

· mattrpav opened on Sep 18, 2026

[#1770] Feature: IP address allow/deny support

Status: Open (in progress).

apache/activemqnumber 2539

#2539 In apache/activemq;

· mattrpav opened on Sep 7, 2026

Feature: Support for authorizing clientId values based on userId

Status: Open (in progress).

apache/activemqnumber 2461

#2461 In apache/activemq;

· mattrpav opened on Aug 14, 2026

[AMQ-9857] Add SSL support for JMX connector in ManagementContext

Status: Open (in progress).

apache/activemqnumber 1661

#1661 In apache/activemq;

· jeanouii opened on Feb 10, 2026

WIP: [AMQ-9750] Update JaasDualAuthenticationBroker to support mixed-mode SSL

Status: Open (in progress).

apache/activemqnumber 1477

#1477 In apache/activemq;

· mattrpav opened on Jul 29, 2025

jasypt version 1.9.3 is vulnerable to CVE-2022-22965

Status: Open.

#1997 In apache/activemq;

· cloudtracer opened on May 7, 2026

Support Client IP addresses allowlist/denylist on the TransportConnectors

Status: Open.

Feature

#1770 In apache/activemq;

· jbonofre opened on Mar 14, 2026

ManagementContext should support sslContext injection

Status: Open.

Feature

#1699 In apache/activemq;

· jbonofre opened on Feb 18, 2026