We have 2 new releases to announce today:
9.3.1.Final includes some important bug fixes, and we recommend all users of 9.3.0.Final to upgrade:
- Fix for CVE-2018-1131 that allows unchecked deserialization in the server from binary java , XML and JSON payloads
- Fixed transcoding from JSON/XML to java objects with deployed entities (ISPN-9336)
- Look up key in cache loader if the entry has expired but hasn't yet been removed from the data container (ISPN-9370)
- Avoid circular references in exceptions, as they were causing stack overflows with logback 1.2.x (ISPN-9362)
See the full list of bug fixes
here.
9.4.0.Alpha1 its the first iteration towards our next big release. Highlights include:
- The Spring Cache provider now supports two configuration properties with which you can determine how long to wait for read and write operations respectively (ISPN-9301).
- You can now obtain nanosecond-resolution statistics for average read/write/remove time (ISPN-9352).
- Queries now throw an AvailabilityException if the cache is in degraded mode and partition mode isn’t ALLOW_READ_WRITES ([ISPN-9340)
- Admin Console: You can now delete cache from Administration console (ISPN-7291).
- Following up on the segmented data container in 9.3.0.Final, cache stores can now be segmented as well, allowing for better performance for bulk operations (ie. cache.size(), cache.entrySet().stream())
- The server-side Hot Rod parser is now generated automatically (ISPN-8981)
The full list of 9.4.0.Alpha1 fixes is
here.
You can find both releases on our
download page. Please report any issue
s in our issue tracker and join the conversation in our Zulip Chat to shape up our next release.