What's Changed
- Bump to 5.19.7-SNAPSHOT by @jbonofre in #1962
- [5.19.x] Add more transport types to the denied list for JMX part 2 (#1972) by @cshannon in #1974
- Execute CI on activemq-5.19.x and activemq-6.2.x branches (5.19.x) by @jbonofre in #1959
- [5.19.x] Block the XBeanBrokerFactory by default inside VMTransportFactory (#2003) by @cshannon in #2011
- [5.19.x] Handle validation for Composite URIs without parens (#2004) by @cshannon in #2013
- [5.19.x] Disable the message servlet by default (#2000) by @cshannon in #2015
- [#2005] 5.19.x - Fix authorization check on removeDestination by @mattrpav in #2008
- [5.19.x] Remove "java.lang" package as a default allowed serializable package (#2026) by @cshannon in #2028
- Bump netty, snappy, karaf to address known CVEs on activemq-5.19.x by @jbonofre in #2031
- Harden default broker and web console configuration (5.19.x backport) by @jbonofre in #2036
- [5.19.x] Harden web console and Jolokia access by default (#2025) by @jbonofre in #2038
- [5.19.x] Backport network flaky test improvements by @cshannon in #2046
- [5.19.x] Ensure connection info is processed before durable sync by @cshannon in #2049
Full Changelog: activemq-5.19.6...activemq-5.19.7