What's Changed

• Bump to 6.2.7-SNAPSHOT by @jbonofre in #2060
• [6.2.x] Update SECURITY.md and default configs for advisory topics by @cshannon in #2057
• [6.2.x] Update Stomp transports with improved validation (#2064) by @cshannon in #2065
• [6.2.x] Send advisory messages using Broker connection context (#2071) by @cshannon in #2075
• [6.2.x] Add https to BrokerView restricted list (#2073) by @cshannon in #2078
• [6.2.x] Add validation for WireFormatInfo (#2080) by @cshannon in #2081
• [6.2.x] Ensure at most one BrokerInfo command is received (#2083) by @cshannon in #2086
• [6.2.x] Restrict full web console URI to admins role (#2074) by @cshannon in #2090
• [6.2.x] Adding missing jsp escapes (#2089) by @cshannon in #2092
• [6.2.x] Limit WireFormatInfo platform details to a reasonable length (#2088) by @cshannon in #2094
• [6.2.x] Add validation for LDAP network connector URIs (#2077) by @cshannon in #2098
• [6.2.x] Add back missing closing tag (#2100) by @cshannon in #2105
• [6.2.x] Validate Stomp headers against max frame size (#2104) by @cshannon in #2110
• [6.2.x] Remove extra buffer copy in StompNIOSSLTransport (#2107) by @cshannon in #2111
• [6.2.x] Replace active temp dests map with set (#2113) by @cshannon in #2114
• [6.2.x] Refactor network connections to process after ConnectionInfo (#2112) by @cshannon in #2116
• [6.2.x] Provide a flexible filter style input stream that limits read amounts (#2118) by @cshannon in #2120
• [6.2.x] Add flag to optionally enable temp destination stealing (#2122) by @cshannon in #2125
• [6.2.x] Improve the broker's handling of message corruption (#2136) by @cshannon in #2143
• [6.2.x] Add support for maxInflateDataSize to limit uncompressed buffers (#2139) by @cshannon in #2147
• [6.2.x] Fix test by enabling allowTempDestinationStealing (#2146) by @cshannon in #2150
• [6.2.x] [#2137] Fix maxUncommittedCount usage across a network of brokers by @mattrpav in #2153
• Fix #2153 - remove test annotation from 6.2.x by @cshannon in #2157
• [6.2.x] Improve handling of partial reads and EOF in Frame size limited filter (#2154) by @cshannon in #2155
• [6.2.x] Preserve ${...} placeholders when removing/modifying networkConnectors in RuntimeConfigurationPlugin (#2123) by @jbonofre in #2134

Full Changelog: activemq-6.2.6...activemq-6.2.7

What's Changed

• Bump to 5.19.7-SNAPSHOT by @jbonofre in #2059
• [5.19.x] Update SECURITY.md and default configs for advisory topics by @cshannon in #2058
• [5.19.x] Update Stomp transports with improved validation (#2064) by @cshannon in #2066
• [5.19.x] Send advisory messages using Broker connection context (#2071) by @cshannon in #2076
• [5.19.x] Add https to BrokerView restricted list (#2073) by @cshannon in #2079
• [5.19.x] Add validation for WireFormatInfo (#2080) by @cshannon in #2082
• [5.19.x] Ensure at most one BrokerInfo command is received (#2083) by @cshannon in #2087
• [5.19.x] Restrict full web console URI to admins role (#2074) by @cshannon in #2091
• [5.19.x] Adding missing jsp escapes (#2089) by @cshannon in #2093
• [5.19.x] Limit WireFormatInfo platform details to a reasonable length (#2088) by @cshannon in #2095
• [AMQ-9288] Fix TransportConnection logger to include exception message on Async Error (5.19.x backport) by @trex-amazon in #2062
• [5.19.x] Add validation for LDAP network connector URIs (#2077) by @cshannon in #2099
• [5.19.x] Add back missing closing tag (#2100) by @cshannon in #2106
• [5.19.x] Validate Stomp headers against max frame size (#2104) by @cshannon in #2108
• [5.19.x] Remove extra buffer copy in StompNIOSSLTransport (#2107) by @cshannon in #2109
• [5.19.x] Replace active temp dests map with set (#2113) by @cshannon in #2115
• [5.19.x] Refactor network connections to process after ConnectionInfo (#2112) by @cshannon in #2117
• [5.19.x] Provide a flexible filter style input stream that limits read amounts (#2118) by @cshannon in #2121
• [5.19.x] Add flag to optionally enable temp destination stealing (#2122) by @cshannon in #2126
• [5.19.x] Improve the broker's handling of message corruption (#2136) by @cshannon in #2145
• [5.19.x] Add support for maxInflateDataSize to limit uncompressed buffers (#2139) by @cshannon in #2148
• [5.19.x] Fix test by enabling allowTempDestinationStealing (#2146) by @cshannon in #2151
• [5.19.x] [#2020] Add expiryCheckEnabled option to MessageEvictionStrategy to s… by @mattrpav in #2149
• [5.19.x] Fix maxUncommittedCount usage across a network of brokers by @mattrpav in #2152
• [5.19.x] Improve handling of partial reads and EOF in Frame size limited filter (#2154) by @cshannon in #2156
• [5.19.x] Preserve ${...} placeholders when removing/modifying networkConnectors in RuntimeConfigurationPlugin (#2123) by @jbonofre in #2135

New Contributors

• @trex-amazon made their first contribution in #2062

Full Changelog: activemq-5.19.7...activemq-5.19.8

What's Changed

• Bump to 6.2.6-SNAPSHOT by @jbonofre in #1961
• [6.2.x] Add more transport types to the denied list for JMX part 2 (#1972) by @cshannon in #1973
• Execute CI on activemq-5.19.x and activemq-6.2.x branches (6.2.x) by @jbonofre in #1958
• build(deps): bump log4j-version from 2.25.3 to 2.25.4 by @robertregina59 in #1993
• [6.2.x] Block the XBeanBrokerFactory by default inside VMTransportFactory (#2003) by @cshannon in #2010
• [6.2.x] Handle validation for Composite URIs without parens (#2004) by @cshannon in #2012
• [6.2.x] Disable the message servlet by default (#2000) by @cshannon in #2014
• [#2005] 6.2.x - Fix authorization check on removeDestination by @mattrpav in #2009
• [6.2.x] Remove "java.lang" package as a default allowed serializable package (#2026) by @cshannon in #2027
• Bump dependencies for CVE fixes on 6.2.x by @jbonofre in #2030
• Harden default broker and web console configuration (6.2.x backport) by @jbonofre in #2035
• build(deps): bump shiro-version from 2.1.0 to 2.2.0 (6.2.x backport) by @jbonofre in #2041
• [6.2.x] Harden web console and Jolokia access by default (#2025) by @jbonofre in #2037
• [6.2.x] Backport network flaky test improvements by @cshannon in #2045
• [6.2.x] Ensure connection info is processed before durable sync by @cshannon in #2048

New Contributors

• @robertregina59 made their first contribution in #1993

Full Changelog: activemq-6.2.5...activemq-6.2.6

What's Changed

• Bump to 5.19.7-SNAPSHOT by @jbonofre in #1962
• [5.19.x] Add more transport types to the denied list for JMX part 2 (#1972) by @cshannon in #1974
• Execute CI on activemq-5.19.x and activemq-6.2.x branches (5.19.x) by @jbonofre in #1959
• [5.19.x] Block the XBeanBrokerFactory by default inside VMTransportFactory (#2003) by @cshannon in #2011
• [5.19.x] Handle validation for Composite URIs without parens (#2004) by @cshannon in #2013
• [5.19.x] Disable the message servlet by default (#2000) by @cshannon in #2015
• [#2005] 5.19.x - Fix authorization check on removeDestination by @mattrpav in #2008
• [5.19.x] Remove "java.lang" package as a default allowed serializable package (#2026) by @cshannon in #2028
• Bump netty, snappy, karaf to address known CVEs on activemq-5.19.x by @jbonofre in #2031
• Harden default broker and web console configuration (5.19.x backport) by @jbonofre in #2036
• [5.19.x] Harden web console and Jolokia access by default (#2025) by @jbonofre in #2038
• [5.19.x] Backport network flaky test improvements by @cshannon in #2046
• [5.19.x] Ensure connection info is processed before durable sync by @cshannon in #2049

Full Changelog: activemq-5.19.6...activemq-5.19.7

What's Changed

• Bump to 6.2.5-SNAPSHOT version by @jbonofre in #1892
• [6.2.x] SSL handshake write timeout enforcement (#1883) by @cshannon in #1894
• [6.2.x] Minor bug fix for BrokerView#validateAllowedUri (#1900) by @cshannon in #1902
• [6.2.x] Restrict URL protocol types loaded by XBeanBrokerFactory (#1910) by @cshannon in #1915
• compilation-fix by @cshannon in #1919
• [6.2.x] Make brokerName immutable in RegionBroker (#1917) by @cshannon in #1923
• [6.2.x] Add Http discovery transport to denied list for JMX (#1918) by @cshannon in #1925
• [6.2.x] Update resource cleanup on queueBrowse servlet (#1912) by @cshannon in #1928
• [6.2.x] Update DestinationView uri resolution (#1914) by @cshannon in #1930
• fix(webconsole): the webconsole now redirect to the slave.jsp when required (slave broker with startAsync="true") [6.2.x] by @jbonofre in #1934
• [6.2.x] Queue browse improvements in webconsole (#1938) by @cshannon in #1942
• [6.2.x] Add more transport types to the denied list for JMX (#1949) by @cshannon in #1952
• [6.2.x] Add remote file filtering for XBeanBrokerFactory (#1950) by @cshannon in #1954

Full Changelog: activemq-6.2.4...activemq-6.2.5

What's Changed

• Bump to 5.19.6-SNAPSHOT version by @jbonofre in #1893
• [5.19.x] SSL handshake write timeout enforcement (#1883) by @cshannon in #1896
• [5.19.x] Minor bug fix for BrokerView#validateAllowedUri (#1900) by @cshannon in #1903
• [5.19.x] Restrict URL protocol types loaded by XBeanBrokerFactory (#1910) by @cshannon in #1916
• [5.19.x] Make brokerName immutable in RegionBroker (#1917) by @cshannon in #1924
• [5.19.x] Add Http discovery transport to denied list for JMX (#1918) by @cshannon in #1926
• [5.19.x] Update resource cleanup on queueBrowse servlet (#1912) by @cshannon in #1927
• [5.19.x] Update DestinationView uri resolution (#1914) by @cshannon in #1929
• fix(webconsole): the webconsole now redirect to the slave.jsp when required [5.19.x] by @jbonofre in #1936
• [5.19.x] Queue browse improvements in webconsole (#1938) by @cshannon in #1943
• [5.19.x] Add more transport types to the denied list for JMX (#1949) by @cshannon in #1953
• [5.19.x] Add remote file filtering for XBeanBrokerFactory (#1950) by @cshannon in #1955

Full Changelog: activemq-5.19.5...activemq-5.19.6

What's Changed

• [6.2.x] Bump version to 6.2.4-SNAPSHOT by @jbonofre in #1868
• [6.2.x] Ensure AMQP protocol marshals messages before passing to broker (#1859) by @cshannon in #1860
• [6.2.x] Backport MQTT fixes by @cshannon in #1884
• [6.2.x] Properly handle SSL handshake updates by @cshannon in #1886

Full Changelog: activemq-6.2.3...activemq-6.2.4

What's Changed

• [5.19.x] Ensure AMQP protocol marshals messages before passing to broker (#1859) by @cshannon in #1861
• [5.19.x] Bump to 5.19.5-SNAPSHOT by @jbonofre in #1869
• [AMQ-9858] [5.19.x] Support purging the first number of messages from a queue by @mattrpav in #1873
• Add in missing equals() in Stomp test class by @cshannon in #1888
• [5.19.x] fix typo by @cshannon in #1889
• [5.19.x] Properly handle SSL handshake updates by @cshannon in #1887
• [5.19.x] Fix test import statements after backport by @cshannon in #1890

Full Changelog: activemq-5.19.4...activemq-5.19.5

What's Changed

• [5.19.x] Update copyright year in the bin distribution NOTICE file by @jbonofre in #1818
• Bump version to 5.19.4-SNAPSHOT by @cshannon in #1835
• Fix FactoryFinder path resolution in Windows (#1831) by @cshannon in #1837
• [#1823] Align DestinationView and DestinationViewMBean (v5.19.x) by @mattrpav in #1841
• [5.19.x] Prevent a VM transport from being used with BrokerView by @cshannon in #1845
• [5.19.x] Add 5.19.4 spring schemas by @jbonofre in #1839
• [5.19.x] Also validate nested composite URIs used with BrokerView by @cshannon in #1849

Full Changelog: activemq-5.19.3...activemq-5.19.4

What's Changed

• [6.2.x] Update copyright year in the bin distribution NOTICE by @jbonofre in #1817
• Bump version to 6.2.3-SNAPSHOT by @cshannon in #1834
• Fix FactoryFinder path resolution in Windows (#1831) by @cshannon in #1836
• [6.2.x] Prevent a VM transport from being used with BrokerView by @cshannon in #1844
• [6.2.x] Add 6.2.3 in spring schemas by @jbonofre in #1838
• [6.2.x] Also validate nested composite URIs used with BrokerView (#1847) by @cshannon in #1848

Full Changelog: activemq-6.2.2...activemq-6.2.3