2026 Security hardening

Issues

• feat: Post-quantum TLS via JDK 25

  Unread
  apache/activemq#2595·mattrpav opened Sep 21, 2026 · Updated Sep 21, 2026·Draft
  

• [#1997] jasypt replacement

  Unread
  apache/activemq#2580·mattrpav opened Sep 18, 2026 · Updated Sep 21, 2026
  2

  

• [#1770] Feature: IP address allow/deny support

  Unread
  apache/activemq#2539·mattrpav opened Sep 7, 2026 · Updated Oct 6, 2026
  5

  

• Feature: Support for authorizing clientId values based on userId

  Unread
  apache/activemq#2461·mattrpav opened Aug 14, 2026 · Updated Sep 21, 2026
  

• [AMQ-9857] Add SSL support for JMX connector in ManagementContext

  Unread
  apache/activemq#1661·jeanouii opened Feb 10, 2026 · Updated Sep 21, 2026
  11

  

• WIP: [AMQ-9750] Update JaasDualAuthenticationBroker to support mixed-mode SSL

  Unread
  apache/activemq#1477·mattrpav opened Jul 29, 2025 · Updated Sep 21, 2026
  4

  

• jasypt version 1.9.3 is vulnerable to CVE-2022-22965

  apache/activemq#1997 · Filter by author cloudtracer opened on May 7, 2026 · 2026 Security hardening
  9

  

• Support Client IP addresses allowlist/denylist on the TransportConnectors

  Feature

  apache/activemq#1770 · Filter by author jbonofre opened on Mar 14, 2026 · 2026 Security hardening
  3

  

• ManagementContext should support sslContext injection

  Feature

  apache/activemq#1699 · Filter by author jbonofre opened on Feb 18, 2026 · 2026 Security hardening
  6

  

• Update SECURITY.md

  Unread
  apache/activemq#2591·mattrpav opened Sep 21, 2026 · Updated Oct 6, 2026
  1