1 2 Previous Next 17 Replies Latest reply on Dec 12, 2010 9:51 AM by Marek Novotny

    Seam 2.2.1.CR2 is available for public.

    Marek Novotny Newbie

      2.2.1.CR2 is out



      Important security and bug fixing release of second candidate version 2.2.1 was aimed to bring
      security fixes and also bug fixes found in previous CR1. It is recommended to upgrade although it is not final release of 2.2.1.


      This release is IMPORTANT, because it fixes the security issue in parametrized JBoss
      Expression Language (EL) expressions - CVE-2010-1871. Seam team
      thanks Meder Kydyraliev of the Google Security Team for responsibly
      reporting this issue to JBoss.


      Next security fix is in upgrade of Spring dependency from 2.5.6.SEC01 to
      2.5.6.SEC02.


      As addition to these security issue, we fixed 39 issues including some
      performance ones and also bugs with JBoss AS 6 M3/4 or documentation
      fixes. More in 
      Release notes


      Seam downloads are available
      here


      Documentation for 2.2.1.CR2 is available at
      standard Documentation at seamframework.org (e.g
      html doc).

        1 2 Previous Next