Stay Informed
This week, read about:
- New 16 High-Severity UEFI Firmware Flaws Discovered in Millions of HP Devices.
- Google’s Jigsaw Launches an Open Source Anti-Harassment Tool for Women.
- The Eclipse Foundation Launches New Working Group for Software-Defined Vehicles.
Key Security, Maintenance, and Features Releases
Security Updates
Firefox 98
Now, you can set a default app to open a file type. Choose the application you want to use to open files of a specific type in your Firefox settings.
After updating to Firefox version 98, "Always ask" download actions will now be reset.
Various security fixes.
Non-Security Updates
Apache Camel 3.14.2
CAMEL-17712
Memory leak in DefaultCamelContext reported by Tomcat 10
CAMEL-17702
[camel-google-storage] Payload type File causes NPE on consumer
CAMEL-17658
camel-core - Configuring endpoint Map options with keys with dots have trimmed keys
CAMEL-17655
OpenTracing throw NPE using onCompletion definition
Apache Tomcat
8.5.76
Add: 61171: Add the portOffset attribute to the Server element which is added to the configured shutdown and Connector ports. Based on a patch by Marek Czernek. (markt)
Add: 64080: Enhance the graceful shutdown feature. Includes a new option for StandardService, gracefulStopAwaitMillis, that allows a time to be specified to wait for client connections to complete and close before the Container hierarchy is stopped. (markt/remm)
Add: Add ha-api-*.jar and jaxws-rt-*.jar to the list of JARs to skip when scanning for TLDs, web fragments and annotations. (michaelo)
Add: Expand the default mappings used by ServletResponse.setLocale() to include a mapping from the ja locale to the Shift_JIS encoding. (markt)
9.0.59
Add: Add ha-api-*.jar and jaxws-rt-*.jar to the list of JARs to skip when scanning for TLDs, web fragments and annotations. (michaelo)
Add: Expand the default mappings used by ServletResponse.setLocale() to include a mapping from the ja locale to the Shift_JIS encoding. (markt)
Fix: 65806: Improve the handling of session ID generation when the default algorithm for SecureRandom (SHA1PRNG) is not supported by the configured providers as will be the case for a FIPS compliant configuration. (markt)
Fix: #464: Fall back to the class loader used to load JULI when the thread context class loader is not set. In a normal Tomcat configuration, this will be the system class loader. Based on a pull request by jackshirazi. (markt)
10.0.17
Add: Add ha-api-*.jar and jaxws-rt-*.jar to the list of JARs to skip when scanning for TLDs, web fragments and annotations. (michaelo)
Add: Expand the default mappings used by ServletResponse.setLocale() to include a mapping from the ja locale to the Shift_JIS encoding. (markt)
Fix: 65806: Improve the handling of session ID generation when the default algorithm for SecureRandom (SHA1PRNG) is not supported by the configured providers as will be the case for a FIPS compliant configuration. (markt)
Fix: #464: Fall back to the class loader used to load JULI when the thread context class loader is not set. In a normal Tomcat configuration, this will be the system class loader. Based on a pull request by jackshirazi. (markt)
Docker 2.3.2
Fix json format for version command by @victor-timofei in #9242
filter containers after project has been rebuilt from resources by @ndeloof in #9244
publish a draft release with auto generate release notes by @glours in #9245
map --interactive to StdinOpen by @ndeloof in #9246
JBoss Drools 7.66.0.Final
[DROOLS-6112] - executable-model test failure in test-compiler-integration DrlSpecificFeaturesTest
[DROOLS-6114] - executable-model test failure in test-compiler-integration MemberOfTest
[DROOLS-6119] - executable-model test failure in test-compiler-integration DrlParserTest
[DROOLS-6123] - executable-model test failure in test-compiler-integration NodeHashingTest