#Release Notes 2.6 LTS

This section contains release notes. Major version contains new features. Minor versions contains bug fixes and security fixes.

#Release Notes 2.6.19

Release Date: January 13 2020

• CVE-2020-13933, CVE-2020-17510, CVE-2020-8908, CVE-2020-25649, CVE-2020-35490, CVE-2020-35491, CVE-2020-26939

#Release Notes 2.6.18

Release Date: October 15 2020

• CVE-2020-13920, CVE-2020-13956

#Release Notes 2.6.17

Release Date: September 9 2020

• CVE-2020-7692, CVE-2020-13933, jersey-media-jaxb:CWE-776

#Release Notes 2.6.16

Release Date: August 6 2020

• #183 WebSwing Application in Starting-Loop
• #186 Combobox Popup misplaced if window is moved
• CVE-2020-11989

#Release Notes 2.6.15

Release Date: July 6 2020

Changes:

• #173 DirectDraw Texture paint ignores alpha
• #54 Anonymous Security Module NPE fix

#Release Notes 2.6.14

Release Date: June 3 2020

Changes:

• #156 Canvas resize issue if webswing-element div initiated with 0 width/height

#Release Notes 2.6.13

Release Date: May 6 2020

Changes:

• #127 Directdraw: rendering right-to-left text is not ordered correctly
• CVE-2020-9488 Man-in-the-Middle
• adds Webswing version to the initialization log

#Release Notes 2.6.12

Release Date: April 9 2020

Changes:

• #121: Webswing JsLink Mechanism Remote Code Execution Vulnerability [CVE-2020-11103]
• #120: Session gets timed out on resizing;
• #111: mac input euro sign not working;
• #110: Directdraw: rendering glyph based text with transform causes transform applied 2x;
• #109: DirectDraw: thai characters - accents in jlabel are not rendered;
• #105: FileChooser not working;
• CVE-2020-7226, CVE-2020-1957, SNYK-JAVA-ORGAPACHESHIRO-174083, SNYK-JAVA-COMMONSCODEC-561518

#Release Notes 2.6.11

Release Date: March 4 2020

Changes:

• fixing the javaFX classpath config in demos
• #104 firefox directdraw rendering fix
• #105 fix updating file filter in upload dialog
• CVE-2020-8840, CVE-2020-9546, CVE-2020-9547, CVE-2020-9548

#Release Notes 2.6.10

Release Date: February 4 2020

Changes:

• #91 JavaFX fxml scene can not be loaded
• #95 Jetty: remove server header

#Release Notes 2.6.9

Release Date: January 8 2020

Changes:

• #86 Unhandled Exception in IBM JRE resolves CVE-2019-20330: Deserialization of Untrusted Data

#Release Notes 2.6.8

Release Date: December 3 2019

Changes:

• handle float width/height values in chrome
• #82: download filename fix
• #81 flag to prevent user.home modification
• #80: Choose correct file filter when saving file

#Release Notes 2.6.7

Release Date: November 4 2019

Changes:

• 3rd party fix for CVE-2019-17531
• #78:Error when shutdown can result in 'zombie' session + notifyshutdown api fix (cherry picked from commit 0ba3530c59d39cb0363594965b7c0461eebe37af)
• #67 : security issue fix (cherry picked from commit 10f237ee11fb316b9cbf2c784e51381a28bf9880)

#Release Notes 2.6.6

Release Date: October 5 2019

Changes:

• fix upload path
• security updates
• updates jQuery Fileupload plugin to v10.2.0
• #50 : DD: long text rendering lag fix
• #48 : fix of java.lang.AbstractMethodError: com.sun.glass.ui.Timer._pause(J)V
• #49 : limit image cache size
• #53 : File upload/donwload fails when filename contains non-US-ASCII characters
• #52 : fix missing client IP when deployed in Tomcat
• #54 : Anonymous Security Module with custom username
• updating JS lib versions jQuery v3.4.1, bootstrap v4.3.1

#Release Notes 2.6.5

Release Date: September 3 2019

Changes:

• upgrade to netbeans 9.0 due to broken NB repository
• 3rd party vulnerabilities: CVE-2019-12400 CVE-2018-11775 CVE-2019-10086 CVE-2019-14379 CVE-2019-14439
• #47 : directdraw IllegalArgumentException fix
• #44 : directdraw animated gif rendering
• #42 : DD - precise text layout

#Release Notes 2.6.4

Release Date: August 1 2019

Changes:

• fix CVE-2019-12814
• webswing proto fix
• #40 : fix dragging JSplitPane (when released on window decoration)
• #33 : fix performance of animated button focus and indefinite progress bar
• #35 : Provide browser timezone to webswing instance
• #36 : fix resolution of best cursor size
• #30 : directdraw hi-dpi bug fixes

#Release Notes 2.6.3

Release Date: July 1 2019

Changes:

• CVE-2018-10237: update guava
• #25 : OIDC security module - access token and refresh token as user attrib
• #18 : fix app termination on IE11 when native filechchooser is open

#Release Notes 2.6.2

Release Date: May 30 2019

Changes:

• #16 : thread cleanup on undeploy
• CVE-2019-12086 : update jackson lib
• #338 : directdraw render high-res image - merge fix
• #342 : allow default unbound/unshared websocket threadpool
• #15 : printing misalignment fix
• #342 : increase default websocket thread pool
• jetty server version update
• #340 : openid roles claim reading improvement
• #339 : focus fix after requestBrowserClipboard
• #338 : directdraw render high-res image
• #337 :fix problem with multi-file upload
• #336 : fix decoration buttons for dialogs

#Release Notes 2.6.1

Release Date: May 1 2019

Changes:

• fix of security module login page content type
• fix of xor mode text rendering in ie, fix web.xml validity
• fix file chooser dialog disapearing on focus lost
• jetty security update

#Release Notes 2.6

Release Date: March 27 2019

Changes:

• Added support for Java 11
• Added support for JavaFx 11 (since JavaFx is no longer part of JRE, demo apps in our distribution only comes with Javafx Linux based libs. For testing on Windows, please build from sources or contact us)
• Hi-DPI (Retina) display support - only with DirectDraw rendering
• Improved session logging - option for per-session log file
• Rest interface upgrade
• Improved Statistics and Monitoring in Admin console
• Extended Customizations and Branding options
• many improvements and bug fixes