Resolve CVE-2026-49432, etc (6.0.x)#243

Open

epearson-tt wants to merge 13 commits into

tomitribe:activemq-6.0.x-TT.xfrom

epearson-tt:activemq-6.0.x-TT.x-cve49432etc

Commits on Jul 16, 2026

AMQ-8398 - Fix Stomp to OpenWire UTF-8 translation

cshannon
authored and
Erik Pearson
committed
CVE-2026-49432: Update Stomp transports with improved validation (#2064) (#2065)

cshannon
authored and
Erik Pearson
committed
CVE-2026-50734: Add validation for WireFormatInfo (#2080) (#2081)

cshannon
authored and
Erik Pearson
committed
CVE-2026-50750: Ensure at most one BrokerInfo command is received (#2083) (#2086)

cshannon
authored and
Erik Pearson
committed
CVE-2026-49877: Restrict full web console URI to admins role (#2074) (#2090)

authored and
Erik Pearson
committed
CVE-2026-52760: Adding missing jsp escapes (#2089) (#2092)

cshannon
authored and
Erik Pearson
committed
CVE-2026-49434: Add validation for LDAP network connector URIs (#2077) (#2098)

cshannon
authored and
Erik Pearson
committed
CVE-2026-53916: Validate Stomp headers against max frame size (#2104) (#2110)

cshannon
authored and
Erik Pearson
committed
CVE-2026-53916: Remove extra buffer copy in StompNIOSSLTransport (#2107) (#2111)

cshannon
authored and
Erik Pearson
committed
CVE-2026-54475: Replace active temp dests map with set (#2113) (#2114)

cshannon
authored and
Erik Pearson
committed
CVE-2026-53917: Provide a flexible filter style input stream that limits read amounts (#2118) (#2120)

authored and
Erik Pearson
committed
CVE-2026-54475: Add flag to optionally enable temp destination stealing (#2122) (#2125)

cshannon
authored and
Erik Pearson
committed
CVE-2026-53917: Improve the broker's handling of message corruption (#2136) (#2143)

cshannon
authored and
Erik Pearson
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Resolve CVE-2026-49432, etc (6.0.x)#243

Resolve CVE-2026-49432, etc (6.0.x)#243
epearson-tt wants to merge 13 commits into
tomitribe:activemq-6.0.x-TT.xfrom
epearson-tt:activemq-6.0.x-TT.x-cve49432etc

Commits on Jul 16, 2026

AMQ-8398 - Fix Stomp to OpenWire UTF-8 translation

CVE-2026-49432: Update Stomp transports with improved validation (#2064) (#2065)

CVE-2026-50734: Add validation for WireFormatInfo (#2080) (#2081)

CVE-2026-50750: Ensure at most one BrokerInfo command is received (#2083) (#2086)

CVE-2026-49877: Restrict full web console URI to admins role (#2074) (#2090)

CVE-2026-52760: Adding missing jsp escapes (#2089) (#2092)

CVE-2026-49434: Add validation for LDAP network connector URIs (#2077) (#2098)

CVE-2026-53916: Validate Stomp headers against max frame size (#2104) (#2110)

CVE-2026-53916: Remove extra buffer copy in StompNIOSSLTransport (#2107) (#2111)

CVE-2026-54475: Replace active temp dests map with set (#2113) (#2114)

CVE-2026-53917: Provide a flexible filter style input stream that limits read amounts (#2118) (#2120)

CVE-2026-54475: Add flag to optionally enable temp destination stealing (#2122) (#2125)

CVE-2026-53917: Improve the broker's handling of message corruption (#2136) (#2143)