Payara Versions Save

Payara Server is an open source middleware platform that supports reliable and secure deployments of Java EE (Jakarta EE) and MicroProfile applications in any environment: on premise, in the cloud or hybrid.

payara-server-7.2024.1.Alpha1

1 month ago

Supported APIs and Applications

  • Jakarta EE 11

  • Jakarta EE 11 Applications

  • MicroProfile 6.1

Features

  • Payara 7 Aplha adds partial support for Concurrency 3.1, mainly using virtual threads, produced by ManagedExecutorService or ManagedThreadFactory.

  • Supports jdk21 & Virtual threads were added on JDK 21.

payara-server-6.2024.4

1 month ago

Supported APIs and Applications

  • Jakarta EE 10

  • Jakarta EE 10 Applications

  • MicroProfile 6.1

Security Fixes

  • [FISH-8344] JSON-P/Parsson (CVE-2023-4043) affected by DoS vulnerability

Bug Fixes

Component Upgrades

payara-server-6.2024.3

2 months ago

Supported APIs and Applications

  • Jakarta EE 10

  • Jakarta EE 10 Applications

  • MicroProfile 6.1

Improvements

  • [FISH-7048] Let Felix choose its system packages

Bug Fixes

  • [FISH-7212] Tmp files are being generated in /tmp upon deployment and not getting deleted

  • [FISH-7364] Restarting a standalone instance just stops and not start it back

  • [FISH-7367] Stop use of Hazelcast ReplicatedMap in ClusteredConfig Class on --lite Payara micro instance

Component Upgrades

payara-server-6.2024.2

2 months ago

Release notes

Supported APIs and Applications

  • Jakarta EE 10
  • Jakarta EE 10 Applications
  • MicroProfile 6.1

Improvements

  • [FISH-7868] Allow Setting of System Properties over 512 characters via Admin Console

  • [FISH-8035] Add Hyperlink to NPS question in Admin Console

  • [FISH-8054] Add Proxy Support to OpenID Security Connector

  • [FISH-8152] Micro Maven - Devmode - Store session state

  • [FISH-8215] Refactor to fix 'JAASRealm.java:70: error: package java.security.acl does not exist' Java 21 Compilation Error

  • [FISH-8216] Refactor to fix 'The Security Manager is deprecated and will be removed in a future release' Java 21 Compilation Error

  • [FISH-8259] Improve Dev Mode Fail-Safe Mechanism in Payara Micro Maven Plugin

Bug Fixes

  • [FISH-7430] Warning Falsely Logged with Custom Error Pages

  • [FISH-8044] [Community Contribution - ctabin]] Avoid crashing due to FileSystemNotFound while behind a Spring boot

Component Upgrades

payara-server-6.2024.1

3 months ago

Release notes

Supported APIs and Applications

  • Jakarta EE 10
  • Jakarta EE 10 Applications
  • MicroProfile 6.1

Improvements

  • [FISH-7821] Add support for Payara Micro Docker Images for ARM

  • [FISH-8190] Add support for Payara Server Docker Images for ARM

Security Fixes

  • [FISH-7833] CVE-2023-3635: Update okio to 3.4.0

  • [FISH-7835] Upgrade OkHTTP to 4.9.2 or higher

Bug Fixes

  • [FISH-5877] Using the @LoginConfig Annotation with 'security-constraints' Leaves Server in an Inconsistent State

  • [FISH-6659] Modules and Components Lost After Server Restart

  • [FISH-7993] Remote JMS Broker Fails to Start

  • [FISH-8100] MP metrics 5.1 not showing correct value for buckets

Component Upgrades

payara-server-6.2023.12

5 months ago

Release notes

Supported APIs and Applications

  • Jakarta EE 10
  • Jakarta EE 10 Applications
  • MicroProfile 6.1

Improvements

  • [FISH-8083] Enhance Payara BOM for Version Consistency with Payara API Dependency

  • [FISH-8129] Publish JDK 21 Docker Images

Bug Fixes

  • [FISH-6466] Health checker reporting false positive stuck threads

  • [FISH-7132] JMS High Availability is not working as expected in Deployment Groups for LOCAL JMS Service

  • [FISH-7841] Payara Micro does not load Hazelcast config file when placed in subdirectory

Component Upgrades

payara-server-6.2023.11

6 months ago

Release notes

Supported APIs and Applications

  • Jakarta EE 10
  • Jakarta EE 10 Applications
  • MicroProfile 6.1

Improvements

  • [FISH-7158] Implement Payara Micro "warmup" command in Payara Server

  • [FISH-7869] Add Individual Timeout Options for Start, Stop, and Restart Domains Commands

  • [FISH-7997] Update Docker JDK to 11.0.21

  • [FISH-7998] Update Docker JDK to 17.0.9

Security Fixes

  • [FISH-7947] Fix CVE-2023-41699 URL Redirection to Untrusted Site

Bug Fixes

  • [FISH-7531] Fix EclipseLink L2 Caching NullPointer Exception

  • [FISH-7808] Fix EclipseLink L2 Caching Deadlock

  • [FISH-7953] Fix Cannot Load Custom Realm Class Error on Windows

  • [FISH-7959] [Community Contribution - ctabin] Fix Multirelease JAR Lookup for Specific Version Classes

Component Upgrades

  • [FISH-7880] Upgrade Maven Bundle Plugin to 5.1.9

payara-server-6.2023.10

6 months ago

Release notes

Supported APIs and Applications

  • Jakarta EE 10
  • Jakarta EE 10 Applications
  • MicroProfile 6.0

Improvements

  • [FISH-7454] Add --timeout argument to the start-domain command

Security Fixes

  • [FISH-7820] CVE-2023-1370: Upgrade json-smart to 2.4.11 in OIDC Client

Bug Fixes

  • [FISH-6519] useBundledJsf Doesn't Remove Old JSF From Classpath Entirely

  • [FISH-7817] Missing --add-opens in Payara Micro

  • [FISH-7846] Missing Asadmin Help Manpages

  • [FISH-7847] Fix InaccessibleObjectException for javax.management and javax.management.openmbean on JDK 17 & 21

Component Upgrades

payara-server-6.2023.9

8 months ago

Release notes

Supported APIs and Applications

  • Jakarta EE 10
  • Jakarta EE 10 Applications
  • MicroProfile 6.0

Improvements

  • [FISH-7340] [Community Contribution - eirbjo] Remove Obsolete EJBContext Methods

  • [FISH-7640] [Community Contribution - lprimak] Improve Hazelcast CP Subsystem Integration Behaviour

  • [FISH-7716] Add Opens on java.base/java.io & on java.base/jdk.internal.misc

Security Fixes

  • [FISH-7647] Port Fixes for CVE-2017-12617

  • [FISH-7648] Fix CVE-2023-1370, json-smart Uncontrolled Recursion vulnerability

Bug Fixes

  • [FISH-7044] Enabling HSTS breaks long responses

  • [FISH-7597] MicroProfile health checks added by CDI extension are not used

Component Upgrades

payara-server-6.2023.8

9 months ago

Release notes

Supported APIs and Applications

  • Jakarta EE 10
  • Jakarta EE 10 Applications
  • MicroProfile 6.0

Improvements

  • [FISH-7639] [Community Contribution - lprimak] Adjust Hazelcast Session Key to Avoid Monitoring Warning

Bug Fixes

  • [FISH-6773] Error while removing application reference from deployment group

  • [FISH-7273] Fix Incorrect 'imqcmd' calculations for the number of consumers after cluster restart

  • [FISH-7409] Unable to Instantiate LdapCtxFactory with JDK 17 Micro

  • [FISH-7451] [Community Contribution - Thehpi] Fix for DataSource.getConnection() blows up on transaction with wrong status

  • [FISH-7528] Staged upgrade from Payara 5 to Payara 6 fail after moving osgi-cache

  • [FISH-7553] Java EE 8 Applications are not Transformed after Payara 5 to Payara 6 Upgrade

  • [FISH-7563] First Attempt to Start Instance Fails After Payara 5 to Payara 6 Upgrade on Windows

  • [FISH-7635] Hazelcast Enterprise License Field Not Big Enough

  • [FISH-7641] Payara BOM version cannot be empty

  • [FISH-7665] Cannot Start Payara Server on 11.0.20 or 17.0.8

Component Upgrades

  • [FISH-7662] Update Docker Image JDK Versions to 11.0.20 & 17.0.8