7.0.17
Eclipse GlassFish is an application server, implementing Jakarta EE. This release is corresponding with the Jakarta EE 10 specification, which is a major new feature release. Jakarta EE 10 requires JDK 11 as a minimum, but also works on JDK 17 and JDK 21.
GlassFish 7.0.17 is a final release, containing final Jakarta EE 10 APIs. It compiles and runs on JDK 11 to JDK 23. MicroProfile support requires JDK 17 or higher.
Release overview
In this summer 2024 release of GlassFish we did a lot of maintenance in which we will continue in future releases. We fixed several security issues and the build now passes also in Java 23. We welcome feedback - if you notice that something doesn't work as expected, feel free to create an issue or even better create your own pull request after signing the ECA.
New Features
Fixes
- Fixes CVE-2024-9329: Setting local Name and Port for /managment/* URI by @luiseufrasio in #25106
- Fixes remote JNDI lookup by @avpinchuk in #25076
- Fixes service creation on Solaris operating system by @avpinchuk in #25120
- Fix styling of the command logger button in Admin Console in Chrome by @OndroMih in #25080
- Faster autodeploy at startup - do not wait before first autodeployment scan by @OndroMih in #25079
- Improvements and fixes in the SQL trace listener functionality by @OndroMih in #25088
- Fix for a ClassCastException when a filter over a WebSocket endpoint wraps the request by @OndroMih in #25107
- Spotted bugs in tests by @dmatej in #25115
- GJULE - fixed dependency on system default charset by @dmatej in #25114
- The common-util: Fixed dependencies on default charset by @dmatej in #25119
- Fixed EJB business interface annotation processing by @avpinchuk in #25122
Updates
- Integrate yasson 3.0.4 by @senivam in #25074
- Upgraded command-security-maven-plugin to 1.0.18 by @dmatej in #25094
Maintenance
- Remove unused property by @pzygielo in #25063
- Validate the structure in all submodules (especially version ids) by @dmatej in #25073
- Enabled checkstyle rules for imports by @dmatej in #25083
- Removed abandoned docker image build by @dmatej in #25093
- Using release instead of source+target, removing ldapbp module by @dmatej in #25096
- Apply proc:none/proc:only for test compile too. by @arjantijms in #25102
- Replace none/only testcompile with full in a profile for JDK 23 by @arjantijms in #25103
- FindBugs is dead - removed from the project. by @dmatej in #25116
- Refactored SharedSecureRandom by @dmatej in #25113
- NetUtils revisited by @dmatej in #25117
- Deleted GFBase64* implementations from pre-JDK8 times by @dmatej in #25118
Documentation
- Website update: Docker and IDE docs, contacts by @OndroMih in #25084
- Fixes #25085 - Use HTTPS in Oracle links of the documentation by @Thihup in #25087
- Document GlassFish API in the Application Development guide by @OndroMih in #25090
New Contributors
Full Changelog: 7.0.16...7.0.17
