LoginSign Up
← Back to all sparks
A

Apache ActiveMQ

DEVOPS
Velocity5.0

Multi-protocol open-source message broker

activemq.apache.org ↗

ActiveMQ 6.4.0 adds OAuth2 JWT login and OpenTelemetry tracing, and tightens the console defaults.

message-brokerapacheauthenticationopentelemetrysecurity-hardeningjms
◆Current state
Apache ActiveMQ shipped 6.4.0, 6.3.3 and 5.19.12 together in late October. The new minor adds OAuth2 JWT authentication through JAAS, OpenTelemetry tracing, IP allow and deny lists, SSL for the JMX connector, and activemq-pool support for JMS 3.1 and 2.0. It also tightens the default Jolokia policy and binds the web console to loopback. The two point releases carry fixes and hardening, including LDAP, ACL cache and connection ID validation.
◆Where it's heading
Security has become the organizing theme of this release set. Authentication and network controls arrive as features in 6.4, while fixes of the same class land on 6.3 and 5.19. Defaults are shifting too, following the earlier AMQP frame-size cut, so a fresh install now exposes less without any configuration.
◆Prediction
The 6.4 line should see follow-up fixes for the new authentication and tracing paths. Maintenance on 5.19.x and 6.3.x looks set to continue through coordinated releases, and these entries give no end date for either.

◆Recent moves

  1. 8d ago

    Apache ActiveMQ 5.19.12

    The 5.19 maintenance branch gets LDAP hardening, ACL cache clearing, connection ID validation and MQTT and failover fixes, with no new features. Several of these fixes also appear in 6.4.0, released the same day.

    View source ↗
  2. 8d ago

    Apache ActiveMQ 6.3.3

    A point release with fixes for the 6.3 line, including MQTT remaining-length handling, ACL cache clearing and KahaDB subscription key validation. Users who aren't ready for 6.4.0 still get the security work.

    View source ↗
  3. 8d ago

    Apache ActiveMQ 6.4.0

    The new minor adds OAuth2 JWT authentication, OpenTelemetry tracing, IP allow and deny lists and JMX over SSL, and restricts Jolokia and console defaults. It is the most substantive release in this feed's recent run, with identity and observability both moving forward.

    View source ↗
  4. 1mo ago

    Apache ActiveMQ 6.2.10

    Dependency bumps for Netty and qpid-jms, a Camel downgrade to align Spring versions, and a schema update. The 6.2 line sees upkeep only.

    View source ↗
  5. 2mo ago

    Apache ActiveMQ v5.19.11

    ActiveMQ 5.19.11 adds destination garbage collection sweep support for destinations with will producers — a meaningful stability improvement for long-running Classic deployments accumulating stale destinations. Several additional bug fixes ship alongside.

    View source ↗
  6. 2mo ago

    ActiveMQ 6.3.2: release tag

    A Maven release plugin tag commit for the 6.3.2 release with no changelog detail provided. Administrative release artifact.

    View source ↗