Loading...

XML

Word

Printable

Type: Component Upgrade
Resolution: Done-Errata
Priority: Major
Fix Version/s: 8.0 Update 1.8.0-dev-1, 8.0 Update 8
Affects Version/s: None
Component/s: Build System, Security
Labels:
None

Blocked:
False
Blocked Reason:

Hide

None

Show
None
Ready:
False
CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
Target Release:

8.0.z.GA
Intelligence Requested:
Market:

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Tag: https://github.com/wildfly-security/wildfly-elytron/releases/tag/2.2.11.Final
Diff: https://github.com/wildfly-security/wildfly-elytron/compare/2.2.10.Final...2.2.11.Final
Hash: c1bed58a97e20c71ea35abc0ac7677262982558f

incorporates

JBEAP-30001 [GSS](8.0.z) ELY-2753 - Add connection-timeout-millis, connection-ttl-millis and socket-timeout-millis to OidcJsonConfiguration to allow oidc.json configuration to parse these attributes

Verified

JBEAP-30011 (8.0.z) ELY-2893 - No SocketConfig is set for Connection Manager in HttpClientBuilder which can cause indefinetly hangs

Verified

JBEAP-29984 (8.0.z) ELY-2903 - Fix for CVE-2024-12369 (ELY-2887) breaks OIDC usage with refresh tokens

Closed

JBEAP-29863 [GSS](8.0.z) Upgrade WildFly Elytron from 2.2.9.Final-redhat-00001 to 2.2.10.Final-redhat-00001

Closed

links to

RHSA-2025:145580 Red Hat JBoss Enterprise Application Platform 8.0.8 Security update

RHSA-2025:145581 Red Hat JBoss Enterprise Application Platform 8.0.8 Security update

RHSA-2025:145582 Red Hat JBoss Enterprise Application Platform 8.0.8 Security update

(2 links to)

Assignee:: Ilia Vassilev

Reporter:: Ilia Vassilev

Votes:: 0 Vote for this issue

Watchers:: 6 Start watching this issue

Created:: 2025/04/24 12:18 PM

Updated:: 2025/09/12 9:01 PM

Resolved:: 2025/07/07 1:26 PM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates