What’s New In The September 2024 Payara Platform Release?

We're happy to announce the latest releases of Payara Platform Community 6.2024.9, Payara Platform Enterprise 6.18.0 and Payara Platform Enterprise 5.67.0. These updates bring important security enhancements, bug fixes and component upgrades to improve your Jakarta EE and MicroProfile development experience on the Payara Platform.

Key Highlights In This Release

Enhanced Security

All three releases include critical security fixes. We addressed a REST interface link redirection vulnerability via the Host parameter and resolved an issue with sensitive information exposure in the admin GUI logger. These updates strengthen Payara Platform's security to better protect your applications.

Bug Fixes for Improved Stability

We tackled several bugs across the platform, including:

• Resolving GUI issues when modifying TLS settings
• Fixing deployment and undeployment failures
• Addressing problems with alternate document roots on Windows Server 2019
• Correcting resource bundle errors

These fixes enhance the overall stability and reliability of the Payara Platform suite of runtimes.

Component Upgrades

To keep the Payara Platform current with the latest versions of dependent libraries, we upgraded several key components in all three releases:

• Mojarra to 4.0.7 (Community and Enterprise 6)
• Apache BCEL to 6.10.0
• JSTL API to 3.0.1
• Various other libraries including Angus Activation, Reactor Core and Yasson

For Payara Enterprise 5.67.0, we updated Classmate to 1.7.0 and upgraded several security-related components.

Docker Image Improvements

All editions of the Payara Platform now feature updated Docker images with the latest JDK versions:

• JDK 21.0.4
• JDK 17.0.12
• JDK 11.0.24
• JDK 8u422 (Enterprise 5.67.0 only)

Community Contributions

We're grateful for valuable community contributions, with special thanks to Lenny Primak. These contributions include improvements to deployment failure handling and refinements to monitoring collection during server shutdown.

Upgrading and Feedback

We recommend you upgrade to these latest Payara Platform releases to benefit from the security enhancements and bug fixes. As always, we welcome your feedback and encourage you to report any issues you encounter on our GitHub repository.

Thank you for your continued support of Payara Platform. We remain committed to providing you with a reliable, secure and high-performance Jakarta EE and MicroProfile runtime.