Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Critical
Fix Version/s: 2.3.21.Final, EE 1.0.0.Final, EE 2.0.0.Final, 2.4.0.Beta1, EE 2.0.0.Beta1, EE 1.0.0.Beta1
Affects Version/s: 2.3.14.SP1
Component/s: Servlet
Labels:
None

Git Pull Request:
https://github.com/undertow-io/undertow/pull/1853, https://github.com/undertow-io/undertow/pull/1861, https://github.com/undertow-io/undertow/pull/1895, https://github.com/undertow-io/undertow-ee/pull/54, https://github.com/undertow-io/undertow-ee/pull/55

Servlet 6.0 added the ability to configure arbitrary attributes for session cookies.
ServletSessionConfig is missing the requisite fields to support this.
Additionally, DeploymentManagerImpl.handleDeploymentSessionConfig(...) needs to be updated to apply cookie attributes to the SessionCookieConfig.

blocks

JBEAP-31852 [GSS](8.1.z) WFLY-19551 - Undertow subsystem is missing Servlet 6.0 support for cookie attributes

Pull Request Sent

WFLY-19551 Undertow subsystem is missing Servlet 6.0 support for cookie attributes

Pull Request Sent

causes

JBEAP-32060 (8.1.z) UNDERTOW-2580 / UNDERTOW-2421 cause compilation failures

JBEAP-32061 (8.0.z) UNDERTOW-2580 / UNDERTOW-2421 cause compilation failures

is incorporated by

WFCORE-7462 CVE-2024-3884 CVE-2025-12543 Upgrade Undertow to 2.3.21.Final

Resolved

WFCORE-7475 Upgrade Undertow to 2.4.x

Coding In Progress

relates to

JBMETA-457 Missing support for cookie attributes (since Servlet 6.0)

Resolved

(1 is incorporated by, 1 relates to)

Assignee:: Bartosz Baranowski

Reporter:: Paul Ferraro

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Created:: 2024/07/19 9:23 PM

Updated:: 2026/02/18 5:21 PM

Resolved:: 2026/01/12 8:14 AM

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates