ActiveMQ 5.19.7 Release

Apache Classic 5.19.7 was released on 2026-05-31. This is a maintenance release on the 5.19.x series, including: - Additional transport types to the JMX denied list - Fix authorization check on the removeDestination - Block XBeanBrokerFactory by default inside the VMTransportFactory - Security enforcements: message servlet disabled by default, harden default configuration for the broker, the webconsole, and jolokia You can find details on the [release notes](https://github.com/apache/activemq/releases/tag/activemq-5.19.7).

Getting the Binary Distributions

Description	Download Link	Verify
Windows Distribution	apache-activemq-5.19.7-bin.zip	ASC, SHA512
Unix/Linux/Cygwin Distribution	apache-activemq-5.19.7-bin.tar.gz	ASC, SHA512

Java compatibility: 11+

Verify the Integrity of Downloads

It is essential that you verify the integrity of the downloaded files using the ASC signature or SHA checksum.

The ASC signatures can be verified using PGP or GPG. Begin by following these steps:

Download the KEYS file.
Download the .asc signature for the relevant distribution file.

Verify the signature:

$ gpg --import KEYS
$ gpg --verify <file-name>.asc <file-name>

Alternatively you can verify the SHA-512 checksum of the file:

$ sha512sum -c <file-name>.sha512

Getting the Binaries using Maven 3

To use this release in your maven project, the simplest dependency that you can use in your Maven POM is:

<dependency>
  <groupId>org.apache.activemq</groupId>
  <artifactId>activemq-all</artifactId>
  <version>5.19.7</version>
</dependency>

If you need more fine grained control of your dependencies (activemq-all is an uber jar) pick and choose from the various components activemq-client, activemq-broker, activemq-xx-store etc.

Getting the Source Code

Source Distributions

Description	Download Link	Verify
Source Release	activemq-parent-5.19.7-source-release.zip	ASC, SHA512

Change Log

For a more detailed view of new features and bug fixes, see the release notes.