|
| 1 | +--- |
| 2 | +layout: post |
| 3 | +title: 'Quarkus 3.2.11.Final released - Maintenance LTS release' |
| 4 | +date: 2024-03-15 |
| 5 | +tags: release |
| 6 | +synopsis: 'Quarkus 3.2.11.Final is the eleventh maintenance release of the 3.2 LTS release train, including critical bug fixes and documentation updates.' |
| 7 | +author: alexeyloubyansky |
| 8 | +--- |
| 9 | + |
| 10 | +Quarkus 3.2.11.Final, the eleventh maintenance release of the 3.2 LTS release train has been released. |
| 11 | + |
| 12 | +This release includes the following security-related fixes: |
| 13 | + |
| 14 | +- https://nvd.nist.gov/vuln/detail/CVE-2024-25710[CVE-2024-25710] Denial of service caused by an infinite loop for a corrupted DUMP file |
| 15 | +- https://nvd.nist.gov/vuln/detail/CVE-2024-1597[CVE-2024-1597] PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE |
| 16 | +- https://access.redhat.com/security/cve/cve-2024-1023[CVE-2024-1023] memory leak due to the use of Netty FastThreadLocal data structures in Vertx |
| 17 | +- https://access.redhat.com/security/cve/CVE-2024-1300[CVE-2024-1300] memory leak when a TCP server is configured with TLS and SNI support |
| 18 | +- https://access.redhat.com/security/cve/CVE-2024-1726[CVE-2024-1726] security checks for some inherited endpoints performed after serialization in RESTEasy Reactive may trigger a denial of service |
| 19 | + |
| 20 | +And the following component upgrades: |
| 21 | + |
| 22 | +- Apache Commons Compress 1.25.0 -> 1.26.0 |
| 23 | +- PostgeSQL JDBC Driver 42.6.0 -> 42.6.1 |
| 24 | +- SmallRye JWT 4.3.0 -> 4.4.0 |
| 25 | +- Vert.X 4.4.6 -> 4.4.8 |
| 26 | + |
| 27 | +If you are not already using a 3.2 release, please refer to https://github.com/quarkusio/quarkus/wiki/Migration-Guide-3.2[our migration guide]. |
| 28 | + |
| 29 | +== Known issues include: |
| 30 | + |
| 31 | +It should be a safe upgrade for anyone already using a 3.2.10.Final release. |
| 32 | + |
| 33 | +== Full changelog |
| 34 | + |
| 35 | +You can get https://github.com/quarkusio/quarkus/releases/tag/3.2.11.Final[the full changelog of 3.2.11.Final on GitHub]. |
| 36 | + |
| 37 | +== Come Join Us |
| 38 | + |
| 39 | +We value your feedback a lot so please report bugs, ask for improvements... Let's build something great together! |
| 40 | + |
| 41 | +If you are a Quarkus user or just curious, don't be shy and join our welcoming community: |
| 42 | + |
| 43 | + * provide feedback on https://github.com/quarkusio/quarkus/issues[GitHub]; |
| 44 | + * craft some code and https://github.com/quarkusio/quarkus/pulls[push a PR]; |
| 45 | + * discuss with us on https://quarkusio.zulipchat.com/[Zulip] and on the https://groups.google.com/d/forum/quarkus-dev[mailing list]; |
| 46 | + * ask your questions on https://stackoverflow.com/questions/tagged/quarkus[Stack Overflow]. |
0 commit comments