WildFly Project News

WildFly Release Plans for 2022

In my Changes are coming to WildFly post last September, I tried to give a sense of how the transition to Jakarta EE 10 was likely to impact the next few WildFly releases. With WildFly 26 out the door and our efforts for 2022 ramping up, I want to give our community on update on how we see things playing out over the course of the year. The tl;dr; of this is WildFly will...

New Security Features in WildFly

An overview of some new security features in WildFly.

Securing WildFly Apps with OpenID Connect

An overview of the native support for OpenID Connect in WildFly.

Upcoming filesystem realm encryption and integrity support in Elytron

An overview of the upcoming encryption and integrity support in Elytron Filesystem Security Realms.

Using a JAAS realm in Elytron

An example of how to use a JAAS realm in WildFly.

Upcoming client side default SSL context provider

An overview of the upcoming Elytron client default SSL context provider.

WildFly 26 is released!

I’m pleased to announce that the WildFly 26 Final zip is now available for download. (Note that the release may not be available yet on Maven Central; please Maven Availability below for more details.) There are number of new things in this release: WildFly Preview and MicroProfile Platform 5 Last week the MicroProfile group announced the release of the MicroProfile 5.0 platform. Thanks and congratulations to the MicroProfile community! MicroProfile 5.0 is mainly focused...

WildFly 26 S2I images have been released on quay.io

WildFly 26 S2I Docker images The WildFly S2I (Source-to-Image) builder and runtime Docker images for WildFly 26 have been released on quay.io/wildfly. For complete documentation on how to use these images using S2I, OpenShift and Docker, refer to the WildFly S2I README. Anticipating a future set of WildFly images The quay.io/wildfly/wildfly-centos7 and quay.io/wildfly/wildfly-runtime-centos7 are now deprecated. When building or running the server, a deprecation notice is displayed in the console. We are planning to...

WildFly Impact of the Apache Log4j Security Vulnerabilities

WildFly users are of course interested in the impact of the recently disclosed security vulnerabilities related to Apache Log4j. On Friday the @WildFlyAS Twitter account tweeted a tl;dr; summary of how the critical impact CVE-2021-44228 vulnerability affects WildFly. In this post I want to provide further details, information on how users who package the log4j-core artifact in their WildFly application deployments can mitigate the risk, and provide information on how the recently disclosed moderate...

New WildFly 26 Beta1 release

I’m pleased to announce that the new WildFly and WildFly Preview 26.0.0.Beta1 releases are available for download at https://wildfly.org/downloads. For more information about the changes included in this release please consult the release notes, in the meantime the developers are working hard on tasks needed to prepare the base to add support for Jakarta EE 10 as the specifications become available. Release Notes The release notes for the release are here, with issues fixed...