You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@karaf.apache.org by Grzegorz Grzybek <gr...@gmail.com> on 2023/04/06 17:37:24 UTC
[ANN] Pax Web 8.0.19 and 9.0.8 released
Hello
I'd like to announce new minor releases of Pax Web: 8.0.19 and 9.0.8.
Current runtime versions are:
- Jetty 9.4.51.v20230217 (8.0.x) and 10.0.14 (9.0.x)
- Tomcat 9.0.73
- Undertow 2.2.23.Final
Besides single improvement (allow custom Tomcat Server implementation -
thanks Mathias Schwaninger!), this release is a step toward OSGi CMPN TCK
compliance.
I was experimenting with public TCK tests from https://github.com/osgi/osgi/
project (only CPMN Web Applications specification for now) and 136 tests
pass out of 138 (I've created osgi/osgi issues for the two remaining tests).
I'm going to check Whiteboard and HttpService TCK tests soon.
For completeness, the changelogs is available for 8.0.19[1] and 9.0.8[2].
kind regards
Grzegorz Grzybek
===
[1]: https://github.com/ops4j/org.ops4j.pax.web/milestone/243?closed=1
[2]: https://github.com/ops4j/org.ops4j.pax.web/milestone/244?closed=1
[ANN] Pax Web 8.0.27 and 9.0.16 released
Posted by Grzegorz Grzybek <gr...@gmail.com>.
Hello
I'd like to announce new releases of Pax Web: 8.0.27 and 9.0.16. Only
runtimes are upgraded (Tomcat and Undertow)
Current runtime versions are:
- Jetty 9.4.54.v20240208 (8.0.x) and 10.0.20 (9.0.x)
- Tomcat 9.0.87
- Undertow 2.2.31.Final
For completeness, the changelogs are available for 8.0.27[1] and 9.0.16[2].
kind regards
Grzegorz Grzybek
===
[1]: https://github.com/ops4j/org.ops4j.pax.web/milestone/260?closed=1
[2]: https://github.com/ops4j/org.ops4j.pax.web/milestone/261?closed=1
[ANN] Pax Web 8.0.26 and 9.0.15 released
Posted by Grzegorz Grzybek <gr...@gmail.com>.
Hello
I'd like to announce new bugfix releases of Pax Web: 8.0.26 and 9.0.15.
Current runtime versions are:
- Jetty 9.4.54.v20240208 (8.0.x) and 10.0.20 (9.0.x)
- Tomcat 9.0.86
- Undertow 2.2.30.Final
There's also one fix for a problem reported by Ivaylo Milev about
non-working "org.ops4j.pax.web.session.cookie.secure" option.
For completeness, the changelogs are available for 8.0.26[1] and 9.0.15[2].
kind regards
Grzegorz Grzybek
===
[1]: https://github.com/ops4j/org.ops4j.pax.web/milestone/258?closed=1
[2]: https://github.com/ops4j/org.ops4j.pax.web/milestone/259?closed=1
[ANN] Pax Web 8.0.25 and 9.0.14 released
Posted by Grzegorz Grzybek <gr...@gmail.com>.
Hello
I'd like to announce new bugfix releases of Pax Web: 8.0.25 and 9.0.14.
Current runtime versions are:
- Jetty 9.4.53.v20231009 (8.0.x) and 10.0.19 (9.0.x)
- Tomcat 9.0.85
- Undertow 2.2.28.Final
There's one fix for a problem reported by @liao-qing-hua that
"org.ops4j.pax.web.session.timeout" option was ignored.
For completeness, the changelogs are available for 8.0.25[1] and 9.0.14[2].
kind regards
Grzegorz Grzybek
===
[1]: https://github.com/ops4j/org.ops4j.pax.web/milestone/256?closed=1
[2]: https://github.com/ops4j/org.ops4j.pax.web/milestone/257?closed=1
[ANN] Pax Web 8.0.24 and 9.0.13 released
Posted by Grzegorz Grzybek <gr...@gmail.com>.
Hello
I'd like to announce new bugfix releases of Pax Web: 8.0.24 and 9.0.13.
Current runtime versions are:
- Jetty 9.4.53.v20231009 (8.0.x) and 10.0.17 (9.0.x)
- Tomcat 9.0.82
- Undertow 2.2.28.Final
There's one fix for a problem reported by Amichai Rothman as
https://issues.apache.org/jira/browse/KARAF-7773. It is a case where
- dynamic filters registered by ServletContextListeners are not
destroyed by Jetty
- ServletContextListeners are not removed during WAB undeployment
For completeness, the changelogs are available for 8.0.24[1] and 9.0.13[2].
kind regards
Grzegorz Grzybek
===
[1]: https://github.com/ops4j/org.ops4j.pax.web/milestone/254?closed=1
[2]: https://github.com/ops4j/org.ops4j.pax.web/milestone/255?closed=1
[ANN] Pax Web 8.0.23 and 9.0.12 released
Posted by Grzegorz Grzybek <gr...@gmail.com>.
Hello
I'd like to announce new minor releases of Pax Web: 8.0.23 and 9.0.12.
Current runtime versions are:
- Jetty 9.4.53.v20231009 (8.0.x) and 10.0.17 (9.0.x)
- Tomcat 9.0.82
- Undertow 2.2.28.Final
These are important fixes related to recent CVE-2023-44487: HTTP/2 Rapid
Reset Attack <https://nvd.nist.gov/vuln/detail/CVE-2023-44487>.
There's also a minor QoL improvements/fixes:
- OSGi security (ServletContextHelper.handleSecurity()) - user was not
visible in access log (thanks François de Parscau!)
- Keycloak 19+ (up to 22) integration was not complete
- Additional Tomcat valves (from context.xml) were removed on restart
(thanks Stephan Siano!)
- ServletContext.getServletContextName() returned wrong value for WABs
(thanks Amichai Rothman!)
For completeness, the changelogs are available for 8.0.23[1] and 9.0.12[2].
kind regards
Grzegorz Grzybek
===
[1]: https://github.com/ops4j/org.ops4j.pax.web/milestone/252?closed=1
[2]: https://github.com/ops4j/org.ops4j.pax.web/milestone/253?closed=1
[ANN] Pax Web 8.0.22 and 9.0.11 released
Posted by Grzegorz Grzybek <gr...@gmail.com>.
Hello
I'd like to announce new minor releases of Pax Web: 8.0.22 and 9.0.11.
Current runtime versions are:
- Jetty 9.4.52.v20230823 (8.0.x) and 10.0.16 (9.0.x)
- Tomcat 9.0.80
- Undertow 2.2.26.Final
There's also a minor fix related to "secure" flag for a connector
(connector WAS secure, but it was displayed as normal).
For completeness, the changelogs are available for 8.0.22[1] and 9.0.11[2].
kind regards
Grzegorz Grzybek
===
[1]: https://github.com/ops4j/org.ops4j.pax.web/milestone/249?closed=1
[2]: https://github.com/ops4j/org.ops4j.pax.web/milestone/250?closed=1
[ANN] Pax Web 8.0.21 and 9.0.10 released (was: [ANN] Pax Web 8.0.20 and 9.0.9 released)
Posted by Grzegorz Grzybek <gr...@gmail.com>.
Sorry for wrong subject line (forward of previous ANN email...)
śr., 26 lip 2023 o 16:48 Grzegorz Grzybek <gr...@gmail.com> napisał(a):
> Hello
>
> I'd like to announce new minor releases of Pax Web: 8.0.21 and 9.0.10.
>
> Current runtime versions are:
>
> - Jetty 9.4.51.v20230217 (8.0.x) and 10.0.15 (9.0.x)
> - Tomcat 9.0.78
> - Undertow 2.2.25.Final
>
> For completeness, the changelogs are available for 8.0.21[1] and 9.0.10[2].
>
> kind regards
> Grzegorz Grzybek
> ===
> [1]: https://github.com/ops4j/org.ops4j.pax.web/milestone/247?closed=1
> [2]: https://github.com/ops4j/org.ops4j.pax.web/milestone/248?closed=1
>
>
Fwd: [ANN] Pax Web 8.0.20 and 9.0.9 released
Posted by Grzegorz Grzybek <gr...@gmail.com>.
Hello
I'd like to announce new minor releases of Pax Web: 8.0.21 and 9.0.10.
Current runtime versions are:
- Jetty 9.4.51.v20230217 (8.0.x) and 10.0.15 (9.0.x)
- Tomcat 9.0.78
- Undertow 2.2.25.Final
For completeness, the changelogs are available for 8.0.21[1] and 9.0.10[2].
kind regards
Grzegorz Grzybek
===
[1]: https://github.com/ops4j/org.ops4j.pax.web/milestone/247?closed=1
[2]: https://github.com/ops4j/org.ops4j.pax.web/milestone/248?closed=1
[ANN] Pax Web 8.0.20 and 9.0.9 released
Posted by Grzegorz Grzybek <gr...@gmail.com>.
Hello
I'd like to announce new minor releases of Pax Web: 8.0.20 and 9.0.9.
Current runtime versions are:
- Jetty 9.4.51.v20230217 (8.0.x) and 10.0.15 (9.0.x)
- Tomcat 9.0.74
- Undertow 2.2.24.Final
There's one important change. Johannes Utzig reported slow deployment times
in real-world, complex Karaf installation. He found that WAB deployment
involved "scanning" of all transitive bundles, while in fact the proper way
to scan a WAB is to scan:
- /WEB-INF/classes and /WEB-INF/*.jar of the WAB - or generally - all
WAB's entries from Bundle-ClassPath manifest
- all attached WAB OSGi bundle fragments
- all bundles "wired" to the WAB (and its fragments) using
Import-Package, Require-Bundle and "osgi.extender" namespace
The scanning however should NOT be transitive (because otherwise we can
reach thousands of bundles).
Also, this release, together with Pax URL 2.6.14 *fully passes official
OSGi CMPN TCK for Web Applications specification!* (OSGi CMPN chapter 128).
For completeness, the changelogs is available for 8.0.20[1] and 9.0.9[2].
kind regards
Grzegorz Grzybek
===
[1]: https://github.com/ops4j/org.ops4j.pax.web/milestone/245?closed=1
[2]: https://github.com/ops4j/org.ops4j.pax.web/milestone/246?closed=1