12:37 a.m.
Great news and many thanks. It’s good to see the CVEs getting addressed promptly.
From: wildfly-dev-bounces(a)lists.jboss.org <wildfly-dev-bounces(a)lists.jboss.org> On
Behalf Of Brian Stansberry
Sent: 15 November 2019 04:12
To: Wildfly Dev mailing list <wildfly-dev(a)lists.jboss.org>
Subject: EXTERNAL: [wildfly-dev] WildFly 18.0.1 is released
We've released WildFly 18.0.1.Final! Get it at
https://wildfly.org/downloads/<https://eur02.safelinks.protection.outl...;.
Here's what's in it:
Release Notes - WildFly - Version 18.0.1.Final
** Component Upgrade
* [WFLY-12621] - Upgrade Hibernate ORM from 5.3.12 to 5.3.13
* [WFLY-12691] - Upgrade WildFly Core to 10.0.2.Final (Resolves CVE-2019-9515 and
CVE-2019-14838)
* [WFLY-12714] - [18.0.x] Upgrade Hibernate Validator to 6.0.18 (Resolves
CVE-2019-10219)
* [WFLY-12717] - Upgrade beanutils from 1.93 to 1.94 (Resolves CVE-2019-10086)
* [WFLY-12719] - [18.0.x] Upgrade JSF based on Mojarra 2.3.9.SP04
* [WFLY-12721] - [18.0.x] Upgrade commons-codec from 1.11 to 1.13
* [WFLY-12726] - [18.0.x] Update jackson-databind to 2.9.10.1 (Resolves CVE-2019-16942
/ CVE-2019-16943)
* [WFLY-12727] - Upgrade Netty to 4.1.42 (Resolves CVE-2019-16869)
* [WFLY-12767] - Upgrade jberet-core from 1.3.4.Final to 1.3.5.Final
* [WFLY-12784] - Upgrade WildFly Core 10.0.3.Final
* [WFLY-12788] - [18.0.x] Upgrade RESTEasy to 3.9.1.Final
** Bug
* [WFLY-12692] - [18.0.x] Exception with web.xml url-pattern
* [WFLY-12729] - [18.0.x] Session passivation event can deadlock if it attempts write
operations on a session
** Task
* [WFLY-12746] - Bump clustering testsuite surefire execution timeout to 5400
Thanks, everyone, for your support of WildFly!
Best regards,
--
Brian Stansberry
Manager, Senior Principal Software Engineer
Red Hat
The information contained in this message is proprietary and/or confidential. If you are
not the intended recipient, please: (i) delete the message and all copies; (ii) do not
disclose, distribute or use the message in any manner; and (iii) notify the sender
immediately. In addition, please be aware that any message addressed to our domain is
subject to archiving and review by persons other than the intended recipient. FIS is a
trading name of the following companies: Advanced Portfolio Technologies Ltd (No: 6312142)
| Clear2Pay Limited (No: 5792457) | Decalog (UK) Limited (No: 2567370) | FIS Apex
(International) Limited (No: 2999960) | FIS Apex (UK) Limited (No. 3573008) | FIS
Consulting Services (UK) Limited (No: 2486794) | FIS Derivatives Utility Services (UK)
Limited (No: 9398140) | FIS Energy Solutions Limited (No: 1889028) | FIS Global Execution
Services Limited (No. 3127109) | FIS Global Trading (UK) Limited (No: 2523114) | FIS
Investment Systems (UK) Limited (No: 1366010) | FIS Sherwood Systems Group Limited (No:
982833) | FIS Systems Limited (No: 1937159) | FIS Treasury Systems (Europe) Limited (No:
2624209) | FIS Treasury Systems (UK) Limited (No: 2893376) | GL Settle Limited (No:
2396127) | Integrity Treasury Solutions Europe Limited (No: 3289271) | Monis Software
Limited (No: 2333925) | Reech Capital Limited (No: 3649490) | Solutions Plus Consulting
Services Limited (No: 3839487) | Valuelink Information Services Limited (No: 3827424) all
registered in England & Wales with their registered office at 25 Canada Square, London
E14 5LQ | FIS Global Execution Services Limited is authorised and regulated by the
Financial Conduct Authority | Certegy Card Services Limited (No: 3517639) | Certegy France
Limited (No: 2557650) | eFunds International Limited (No: 1930117) | Fidelity Information
Services Limited (No: 2225203) | FIS Payments (UK) Limited (No: 4215488) | Metavante
Technologies Limited (No: 2659326) all registered in England & Wales with their
registered office at 1st Floor Tricorn House, 51-53 Hagley Road, Edgbaston, Birmingham,
West Midlands, B16 8TU, United Kingdom | FIS Payments (UK) Limited is authorised and
regulated by the Financial Conduct Authority; some services are covered by the Financial
Ombudsman Service (in the UK). Clear2Pay Limited, Registered in Scotland (No SC157659),
Registered Office: Clear2Pay House, Pitreavie Court, Pitreavie Business Park Queensferry
Rd, Dunfermline, Fife, SS, KY11 8UU, Scotland | FIS eProcess Intelligence LLC (UK Branch),
UK Establishment Registered in England & Wales (No: FC16527/Branch No. BR000355),
Registered Branch Office: 25 Canada Square, London, E14 5LQ; FIS eProcess Intelligence LLC
is a limited liability company formed in the USA registered on file with the Office of the
Delaware Secretary of State, Division of Corporations (File No. 2032143), Head Office: 601
Riverside Avenue, Jacksonville Florida, FL32204, USA | FIS Investment Systems LLC, UK
Establishment Registered in England & Wales (No: FC033836/Branch No. BR018923),
Registered Branch Office: 25 Canada Square, London, E14 5LQ; FIS Investment Systems LLC is
a limited liability company formed in the USA registered on file with the Office of the
Delaware Secretary of State, Division of Corporations (File No. 0881255), Head Office: 377
E. Butterfield Road, Suite 800, Lombard, IL 60148, USA | Calls to and from the companies
may be recorded for quality purposes. | All of the named companies are part of FIS
(Fidelity National Information Services, Inc.).