Stay Informed
This week, read about:
- Chinese Hackers Exploited Sophos Firewall Zero-Day Flaw to Target South Asian Entity.
- This Open-Source Project Proves Chrome Extensions Can Track You.
- New Research from Snyk and The Linux Foundation Reveals Significant Security Concerns Resulting from Open Source Software Ubiquity.
Key Security, Maintenance, and Features Releases
Non-Security Updates
Apache Tomcat 9.0.64, 10.0.22 and 8.5.81
8.5.81
Fix: Correct a regression in the 8.5.80 (not released) that broken or unexpectedly modified some TLS configurations when running on a Java 8 JDK. (markt)
9.0.64
Fix: Update the memory leak protection code to support stopping application created executor threads when running on Java 19 and later. (markt)
Fix: Improve the error message if a required --add-opens option is missing. (markt)
Fix: Disable the memory leak correction code enabled by the Context attribute clearReferencesObjectStreamClassCaches when running on a JRE that includes a fix for the underlying memory leak. (markt)
Fix: #515: Avoid deadlock on startup with some utility executor configurations. Submitted by Han Li. (remm)
10.0.22
Fix: Update the memory leak protection code to support stopping application created executor threads when running on Java 19 and later. (markt)
Fix: Improve the error message if a required --add-opens option is missing. (markt)
Fix: Disable the memory leak correction code enabled by the Context attribute clearReferencesObjectStreamClassCaches when running on a JRE that includes a fix for the underlying memory leak. (markt)
Fix: #515: Avoid deadlock on startup with some utility executor configurations. Submitted by Han Li. (remm)
PostgreSQL JDBC Driver 42.4.0
fix: added GROUP_STARTUP_PARAMETERS boolean property to determine whether or not to group startup parameters in a transaction (default=false like 42.2.x) fixes Issue #2425 pgbouncer cannot deal with transactions in statement pooling mode PR #2425
fix: queries with up to 65535 (inclusive) parameters are supported now (previous limit was 32767) PR #2525, Issue #1311
fix: workaround JarIndex parsing issue by using groupId/artifactId-version directory namings. Regression since 42.2.13. PR #2531, issue #2527
fix: use Locale.ROOT for toUpperCase() toLowerCase() calls