Apache ActiveMQ · Lifecycle Status

Apache ActiveMQ End of Life (EOL) Dates & Support Timeline

Complete end-of-life dates, support windows, and security status for all Apache ActiveMQ versions. Data sourced from endoflife.date and official vendor documentation. Updated at every deploy.

Apache ActiveMQ 6.3.1 is actively supported. No versions approaching EOL in the next 6 months.
Running an EOL version? Get matched with support options — free ↓
Latest Active
6.3.1
6.3 series
Next EOL
None upcoming
Active Versions
3
of 24 total
EOL Versions
21
no longer patched
40 / 100
Medium Risk
EOL Risk Score™  How is this calculated? →
EOL Recency
30/40
Attack Surface
10/30 Medium tier
CISA KEV Exposure
0/20 Not in KEV
Extended Support
0/10 Available
EOL Risk Score™ — proprietary methodology by endoflife.ai. Factors: EOL recency, attack surface breadth, CISA KEV catalog presence, extended support availability. Updated at every build. Methodology →
Release Cycle Timeline
EOL   Warning   Active   Today
Release cycle timeline 20082009201020112012201320142015201620172018201920202021202220232024202520265.05.15.25.35.45.55.65.75.85.95.105.115.125.135.145.155.165.175.186.06.15.196.26.3TODAY
21 versions of Apache ActiveMQ are past end of life — security patches have stopped. Get matched with support →
All Versions
VersionLatest ReleaseRelease DateEOL DateDaysStatus
5.0 5.0.0 Dec 7, 2007 May 1, 2008 6674 days past EOL EOL
5.1 5.1.0 May 1, 2008 Jun 30, 2009 6249 days past EOL EOL
5.2 5.2.0 Jun 30, 2009 Oct 23, 2009 6134 days past EOL EOL
5.3 5.3.1 Oct 23, 2009 Aug 13, 2010 5840 days past EOL EOL
5.4 5.4.3 Aug 13, 2010 Oct 12, 2011 5415 days past EOL EOL
5.5 5.5.1 Mar 28, 2011 May 2, 2012 5212 days past EOL EOL
5.6 5.6.0 May 2, 2012 Oct 2, 2012 5059 days past EOL EOL
5.7 5.7.0 Oct 2, 2012 Feb 6, 2013 4932 days past EOL EOL
5.8 5.8.0 Feb 6, 2013 Oct 14, 2013 4682 days past EOL EOL
5.9 5.9.1 Oct 14, 2013 Jun 5, 2014 4448 days past EOL EOL
5.10 5.10.2 Jun 5, 2014 Feb 13, 2015 4195 days past EOL EOL
5.11 5.11.4 Jan 30, 2015 Feb 3, 2016 3840 days past EOL EOL
5.12 5.12.3 Aug 10, 2015 Feb 3, 2016 3840 days past EOL EOL
5.13 5.13.5 Nov 30, 2015 Dec 16, 2016 3523 days past EOL EOL
5.14 5.14.5 Aug 2, 2016 Jun 27, 2017 3330 days past EOL EOL
5.15 5.15.16 Jun 27, 2017 Mar 9, 2022 1614 days past EOL EOL
5.16 5.16.8 Jun 25, 2020 Mar 18, 2023 1240 days past EOL EOL
5.17 5.17.7 Mar 9, 2022 Apr 12, 2024 849 days past EOL EOL
5.18 5.18.7 Mar 18, 2023 Mar 11, 2025 516 days past EOL EOL
6.0 6.0.1 Nov 14, 2023 Mar 17, 2024 875 days past EOL EOL
6.1 6.1.8 Mar 11, 2024 Dec 2, 2025 250 days past EOL EOL
5.19 5.19.10 Mar 7, 2025 TBD Supported Active
6.2 6.2.9 Nov 9, 2025 TBD Supported Active
6.3 6.3.1 Jul 24, 2026 TBD Supported Active
Apache ActiveMQ EOL status badge Live EOL badge for your README — updates automatically at every build. [![Apache ActiveMQ EOL](https://img.shields.io/endpoint?url=https%3A%2F%2Fendoflife.ai%2Fbadge%2Fapache-activemq.json)](https://endoflife.ai/apache-activemq)

What does Apache ActiveMQ end of life mean for your organization?

When a version of Apache ActiveMQ reaches end of life, the maintainers stop issuing security patches. Vulnerabilities discovered after this date are publicly disclosed on the National Vulnerability Database, exploit code appears on GitHub, and your systems remain permanently exposed.

The CVE blind spot: Most vulnerability scanners check for known CVEs but do not flag the accumulation of unpatched vulnerabilities in EOL software. With a zero-day, nobody knows about the vulnerability. With EOL software, the vulnerability is public — listed, rated, and often weaponized — but no patch will ever exist. This is the most dangerous gap in enterprise security posture.

Organizations running EOL Apache ActiveMQ should treat it as a vulnerability class in their risk register, apply compensating controls (network segmentation, enhanced monitoring, access restriction), and prioritize migration to a supported version.

Your options when Apache ActiveMQ reaches end of life

There are four realistic paths. Which one is right depends far more on how long the system needs to keep running than on the version you are on today.

OptionBest whenWatch out for
Move to a supported version The system will outlive the current version's support window and you can schedule the work Budget for compatibility testing, not just the upgrade itself — that is where the real cost sits
Replace the component The project is unmaintained, or a better-supported alternative exists The replacement has its own lifecycle and its own end-of-life date — you are changing vendors, not escaping the problem
Buy extended support Migration is genuinely underway but cannot finish before the deadline, or the workload is frozen by certification or a third-party application A bridge, not a destination — every year purchased is a year the migration still has to happen
Document accepted risk The system is isolated, short-lived, or scheduled for retirement Only defensible with real compensating controls and a written decision — auditors treat undocumented end-of-life software as a finding

How to choose, in one question: how many more years does this system need to run? Under a year, extended support (where it exists) is usually cheaper than an emergency migration. One to three years, migrate — support purchased repeatedly costs more than doing the project once, and the project only gets harder as the version ages. Indefinitely, migrate now and plan the next migration before it surprises you.

Worth saying plainly, because vendors selling extended support rarely will: extended support is often the more expensive choice over a multi-year horizon. It is the right answer when a deadline is genuinely unreachable, not as a default. Compare the annual fee against the one-time cost of migrating before committing to either.

Extended Support Options

If you cannot migrate immediately, extended support vendors provide continued security patches for EOL Apache ActiveMQ versions. This is a bridge, not a permanent solution — plan your migration in parallel.

endoflife.ai
Get Apache ActiveMQ Support Options

Apache ActiveMQ has 21 versions past end of life — security patches have stopped, but CVE disclosures haven't. The good news: extended support for Apache ActiveMQ exists — vetted vendors ship security patches for years past the official date. Tell us where to reach you and we'll reply with matched options and pricing guidance.

Free · No obligation · Independent — we track the dates, vendors don't pay for placement · Dates verified against vendor sources
Frequently Asked Questions
What is the end-of-life date for Apache ActiveMQ?
See the full table above for all Apache ActiveMQ version EOL dates.
When is the Apache ActiveMQ support end date?
Each Apache ActiveMQ version has its own support end date — see the table above for every version's date.
What is the latest supported version of Apache ActiveMQ?
The latest active version of Apache ActiveMQ is 6.3.1. Always verify against the table above as support windows can change.
What happens when Apache ActiveMQ reaches end of life?
When Apache ActiveMQ reaches end of life, the vendor stops issuing security patches. Any CVEs disclosed after the EOL date accumulate indefinitely with no patch path — creating an ever-growing attack surface that most vulnerability scanners do not flag.
How do I check if I'm running an EOL version of Apache ActiveMQ?
Check your current version against the table above. If your version's EOL date has passed, you are running unsupported software. You can also use the endoflife.ai Stack Scanner to check your entire dependency file at once.
Is there extended support available for EOL Apache ActiveMQ versions?
Some vendors offer extended support for EOL software. Contact the original vendor or check with enterprise support providers for options.

Related Products

Data from endoflife.date API · endoflife.date · Generated at build time · How we source data →
Apache ActiveMQ end-of-life status badge