Is there a functional difference between WF10 and WF12?

[gir489]

We're currently running Wildfly 10.1 in production, but have Wildfly 12 on dev. Aside from configuration and feature differences, are there any security/vulnerability differences between 10 and 12? I don't see a changelog posted for 10.1 -> 11 -> 12, so we're not really sure if we even need to deploy 12, if we don't want to take advantage of any of the new features, considering 10 works fine. We have a working model of our code base running on 12, so we don't fall behind like we did with JBoss 4, but we'd like to know what, if any, vulnerabilities/security patches are in 12.

[rhn-support-abhati]

There are multiple new features introduced in wildfly 12. Wildfly 12 has EE8 functionality in fully completed incremental chunks, as opposed to waiting for everything to finish in a big bang release. WildFly 12 makes significant progress on this front, adding support for the majority of the new standards.

Issues/Bugs present in wildfly 10 are fixed in Wildfly 12.

Refer to WildFly 12 Release notes for a list of new enhancements,bug fixes etc.

[mchoma]

I recommend you to upgrade. There is lot of CVEs fixed between WF10 and WF 12. Especially in WF 11 [1]

[1] https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.1/html-single/7.1.0_release_notes/#fixed_cves

[ctomc]

Release notes you can always prepare yourself from JIRA

for example Report - Release Notes Report - JBoss Issue Tracker

[gir489]

Wow! There's a lot of CVEs fixed between 10 and 12. I'll see what I can do about extraditing a push to production.