Resolve CVE-2026-49432, etc (5.15.x)#247

Open

epearson-tt wants to merge 17 commits into

tomitribe:activemq-5.15.x-TT.xfrom

epearson-tt:activemq-5.15.x-TT.x-cve49432etc

Commits on Jul 17, 2026

AMQ-8398 - Fix Stomp to OpenWire UTF-8 translation

cshannon
authored and
Erik Pearson
committed
CVE-2026-49432: Update Stomp transports with improved validation (#2064) (#2066)

cshannon
authored and
Erik Pearson
committed
CVE-2026-50734: Add validation for WireFormatInfo (#2080) (#2082)

cshannon
authored and
Erik Pearson
committed
CVE-2026-50750: Ensure at most one BrokerInfo command is received (#2083) (#2087)

cshannon
authored and
Erik Pearson
committed
CVE-2026-49877: Restrict full web console URI to admins role (#2074) (#2091)

authored and
Erik Pearson
committed
CVE-2026-52760: Adding missing jsp escapes (#2089) (#2093)

cshannon
authored and
Erik Pearson
committed
CVE-2026-49434: Add validation for LDAP network connector URIs (#2077) (#2099)

cshannon
authored and
Erik Pearson
committed
CVE-2026-52760: Add back missing closing tag (#2100) (#2106)

cshannon
authored and
Erik Pearson
committed
CVE-2026-53916: Validate Stomp headers against max frame size (#2104) (#2108)

cshannon
authored and
Erik Pearson
committed
CVE-2026-53916: Remove extra buffer copy in StompNIOSSLTransport (#2107) (#2109)

cshannon
authored and
Erik Pearson
committed
CVE-2026-54475: Replace active temp dests map with set (#2113) (#2115)

cshannon
authored and
Erik Pearson
committed
CVE-2026-53917: Provide a flexible filter style input stream that limits read amounts (#2118) (#2121)

authored and
Erik Pearson
committed
CVE-2026-54475: Add flag to optionally enable temp destination stealing (#2122) (#2126)

cshannon
authored and
Erik Pearson
committed
CVE-2026-53917: Improve the broker's handling of message corruption (#2136) (#2145)

cshannon
authored and
Erik Pearson
committed
CVE-2026-54475: Fix test by enabling allowTempDestinationStealing (#2146) (#2151)

cshannon
authored and
Erik Pearson
committed
CVE-2026-53917: Improve handling of partial reads and EOF in Frame size limited filter (#2154) (#2156)

cshannon
authored and
Erik Pearson
committed
Adapt backported CVE fixes/tests to JDK 8 and JMS 1.1 on 5.15.x-TT.x
Erik Pearson
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Resolve CVE-2026-49432, etc (5.15.x)#247

Resolve CVE-2026-49432, etc (5.15.x)#247
epearson-tt wants to merge 17 commits into
tomitribe:activemq-5.15.x-TT.xfrom
epearson-tt:activemq-5.15.x-TT.x-cve49432etc

Commits on Jul 17, 2026

AMQ-8398 - Fix Stomp to OpenWire UTF-8 translation

CVE-2026-49432: Update Stomp transports with improved validation (#2064) (#2066)

CVE-2026-50734: Add validation for WireFormatInfo (#2080) (#2082)

CVE-2026-50750: Ensure at most one BrokerInfo command is received (#2083) (#2087)

CVE-2026-49877: Restrict full web console URI to admins role (#2074) (#2091)

CVE-2026-52760: Adding missing jsp escapes (#2089) (#2093)

CVE-2026-49434: Add validation for LDAP network connector URIs (#2077) (#2099)

CVE-2026-52760: Add back missing closing tag (#2100) (#2106)

CVE-2026-53916: Validate Stomp headers against max frame size (#2104) (#2108)

CVE-2026-53916: Remove extra buffer copy in StompNIOSSLTransport (#2107) (#2109)

CVE-2026-54475: Replace active temp dests map with set (#2113) (#2115)

CVE-2026-53917: Provide a flexible filter style input stream that limits read amounts (#2118) (#2121)

CVE-2026-54475: Add flag to optionally enable temp destination stealing (#2122) (#2126)

CVE-2026-53917: Improve the broker's handling of message corruption (#2136) (#2145)

CVE-2026-54475: Fix test by enabling allowTempDestinationStealing (#2146) (#2151)

CVE-2026-53917: Improve handling of partial reads and EOF in Frame size limited filter (#2154) (#2156)

Adapt backported CVE fixes/tests to JDK 8 and JMS 1.1 on 5.15.x-TT.x