Infinispan 9.3.1.Final and 9.4.0.Alpha1

We have 2 new releases to announce today:

9.3.1.Final includes some important bug fixes, and we recommend all users of 9.3.0.Final to upgrade:

• Fix for CVE-2018-1131 that allows unchecked deserialization in the server from binary java , XML and JSON payloads
• Fixed transcoding from JSON/XML to java objects with deployed entities (ISPN-9336)
• Look up key in cache loader if the entry has expired but hasn't yet been removed from the data container (ISPN-9370)
• Avoid circular references in exceptions, as they were causing stack overflows with logback 1.2.x (ISPN-9362)

See the full list of bug fixes here.


9.4.0.Alpha1 its the first iteration towards our next big release. Highlights include:

• The Spring Cache provider now supports two configuration properties with which you can determine how long to wait for read and write operations respectively (ISPN-9301).
• You can now obtain nanosecond-resolution statistics for average read/write/remove time (ISPN-9352).
• Queries now throw an AvailabilityException if the cache is in degraded mode and partition mode isn’t ALLOW_READ_WRITES ([ISPN-9340)
• Admin Console: You can now delete cache from Administration console (ISPN-7291).
• Following up on the segmented data container in 9.3.0.Final, cache stores can now be segmented as well, allowing for better performance for bulk operations (ie. cache.size(), cache.entrySet().stream())
• The server-side Hot Rod parser is now generated automatically (ISPN-8981) 

The full list of 9.4.0.Alpha1 fixes is here.


You can find both releases on our download page. Please report any issues in our issue tracker and join the conversation in our Zulip Chat to shape up our next release.