Wildfly
Release notes - WildFly - 41.0.1.Final
Bug
WFLY-22099 Cache listeners not re-registered on resume.
WFLY-22122 OIDC logout tests need to be updated for default stability level
WFLY-22128 Quickstarts: todo-backend fails to build when configuring undertow
WFLY-22136 The elytron-oidc-client subsystem doesn't parse/marshal OIDC logout attributes when the community:2.0 schema is used
WFLY-22156 CVE-2026-15560 openjdk-orb: unauthed class loading via IIOP in EAP
WFLY-22157 CVE-2026-15563 wildfly-iiop-openjdk: Missing authentication on EAP's IIOP NameService leads to MITM or DoS
WFLY-22158 CVE-2026-15567 wildfly-iiop-openjdk: Wildfly: Pre-auth denial of service on the IIOP listener
WFLY-22165 PowerShell scripts do not process JAVA_OPTS from the environment as its .bat counterpart
Component Upgrade
WFLY-22111 Upgrade RESTEasy to 7.0.3.Final
WFLY-22130 (resolves CVE-2026-46581) Update Mojarra to WildFly to 4.0.22 and 4.1.13
WFLY-22131 Upgrade RESTEasy to 6.2.17.Final
WFLY-22133 Upgrade ironjacamar to 3.0.22.Final [41.x]
WFLY-22150 Upgrade Apache CXF components from 4.1.8-jbossorg-1 to 4.1.8 (resolves CVE-2026-66909)
WFLY-22151 Upgrade org.apache.qpid:proton-j from 0.34.1 to 0.35.0 (resolves CVE-2026-66274)
WFLY-22154 Upgrade JBossWS-CXF from 7.4.0 to 7.4.1
WFLY-22161 [41.0.1.Final] Upgrade HAL to 3.7.21.Final
WFLY-22163 Bump io.netty:netty-bom from 4.1.136.Final to 4.1.137.Final (resolves numerous CVEs)
WFLY-22167 Upgrade lz4-java to 1.11.1 - resolves CVE-2026-59949
WFLY-22169 Upgrade Jastow from 2.3.0.Final to 2.3.1.Final (Jakarta EE 11) and from 2.2.9.Final to 2.2.10.Final (Jakarta EE 10)
WFLY-22170 Upgrade Apache Neethi to 3.2.3 (resolves https://nvd.nist.gov/vuln/detail/CVE-2026-66142/66143/66144)
WFLY-22171 Upgrade lz4-java to 1.11.2 (resolves GHSA-6cx8-rjf8-pr8g and GHSA-4v53-57pg-c464)
WFLY-22173 Upgrade Vert.x to 4.5.32
Task
WFLY-22143 Remove the com.ibm.async.asyncutil module
WFLY-22159 Fix powershell script test failures in advance of wildfly-core upgrade for WFCORE-7670
What's Changed
- WFLY-22099 Cache listeners not re-registered on resume. by @pferraro in https://github.com/wildfly/wildfly/pull/20259
- (41.x) [WFLY-22136][WFLY-22122] elytron-oidc-client OIDC logout config parsing/marshalling and non-preview testing fixes by @bstansberry in https://github.com/wildfly/wildfly/pull/20306
- [41.x][WFLY-22151] Bumps org.apache.qpid:proton-j from 0.34.1 to 0.35.0. by @mskacelik in https://github.com/wildfly/wildfly/pull/20314
- (41.x) WFLY-22163 Bump io.netty:netty-bom from 4.1.136.Final to 4.1.137.Final by @rhusar in https://github.com/wildfly/wildfly/pull/20328
- (41.x) - [WFLY-22150][WFLY-22154] - Upgrade Apache CXF from 4.1.6 to 4.1.8 and JBossWS-CXF from 7.4.0 to 7.4.1 by @fabiobrz in https://github.com/wildfly/wildfly/pull/20315
- [WFLY-22111] & [WFLY-22131] Upgrade RESTEasy to 6.2.17.Final for EE 10 and 7.0.3.Final for EE 11 by @jamezp in https://github.com/wildfly/wildfly/pull/20295
- [WFLY-22161] (41.0.1.Final) Upgrade HAL to 3.7.21.Final by @hpehl in https://github.com/wildfly/wildfly/pull/20325
- [WFLY-21262] Upgrade lz4-java to 1.11.1 by @kabir in https://github.com/wildfly/wildfly/pull/20332
- [WFLY-22169] Upgrade Jastow from 2.3.0.Final to 2.3.1.Final (Jakarta EE 11) and from 2.2.9.Final to 2.2.10.Final (Jakarta EE 10) by @ropalka in https://github.com/wildfly/wildfly/pull/20335
- WFLY-22159 Fix powershell script test failures in advance of wildfly-… by @bstansberry in https://github.com/wildfly/wildfly/pull/20323
- [WFLY-22133] Upgrade ironjacamar to 3.0.22.Final by @bstansberry in https://github.com/wildfly/wildfly/pull/20339
- WFLY-22130 - Update Mojarra to WildFly to 4.0.22 and 4.1.13 by @bstansberry in https://github.com/wildfly/wildfly/pull/20338
- [WFLY-22171] Upgrade at.yawk.lz4:lz4-java from 1.11.1 to 1.11.2 by @bstansberry in https://github.com/wildfly/wildfly/pull/20340
- [WFLY-22165] PowerShell scripts do not process JAVA_OPTS from the environment as the .bat counteparts by @bstansberry in https://github.com/wildfly/wildfly/pull/20342
- [WFLY-22170] Upgrade Apache Neethi to 3.2.3 by @bstansberry in https://github.com/wildfly/wildfly/pull/20337
- [WFLY-22156][WFLY-22157][WFLY-22158] IIOP Fixes by @bstansberry in https://github.com/wildfly/wildfly/pull/20343
- [WFLY-22184] Upgrade WildFly Core to 33.0.1.Final by @yersan in https://github.com/wildfly/wildfly/pull/20349
- [WFLY-22173] Upgrade version.io.vertx.vertx from 4.5.30 to 4.5.32 by @bstansberry in https://github.com/wildfly/wildfly/pull/20341
Full Changelog: https://github.com/wildfly/wildfly/compare/41.0.0.Final...41.0.1.Final