LoginSign Up
← Back to all sparks
W

WildFly

DEVOPS
Velocity5.0

Modular Jakarta EE application server for building and running Java applications

www.wildfly.org ↗

WildFly 42 brings virtual threads to Jakarta Concurrency.

jakarta eeapplication servervirtual threadsclusteringsecurity
◆Current state
WildFly is a Jakarta EE application server on a regular train of Beta, Final and patch releases. WildFly 42.0.0.Final (October 22) supports virtual threads in the Jakarta Concurrency 3.1 implementation, promotes idle time-based eviction for distributable sessions, SFSBs and timers to default stability, and adds automatic meter management for resources added at runtime. 41.0.1 in August was a security patch closing three IIOP CVEs.
◆Where it's heading
WildFly moves features through stability levels release by release; 42 promotes the eviction configuration that first arrived in 39. The bug list also shows continuing cleanup of XML parsing issues (CWE-611) and clustering edge cases.
◆Prediction
Expect 42.0.1.Final next, consolidating fixes and component upgrades as 41.0.1 did.

◆Recent moves

  1. 18d ago

    WildFly 42: virtual threads for Jakarta Concurrency

    The 42 final adds virtual-thread support in Jakarta Concurrency and moves distributable-session eviction to default stability. It is the usual train release: a couple of promoted features and a long bug list.

    View source ↗
  2. 1mo ago

    WildFly 42 Beta1: virtual threads and session eviction

    The Beta carried the same two headline features two weeks before the final, as the preview step of the train.

    View source ↗
  3. 2mo ago

    WildFly 41.0.1 closes three IIOP CVEs and a Mojarra advisory

    The first 41.x patch is primarily a security release: three IIOP CVEs — unauthenticated class loading, a missing-authentication NameService path, and a pre-auth listener denial of service — land alongside upgrades to RESTEasy, Mojarra, CXF, Netty and lz4-java that resolve further advisories. Functional fixes are narrow, covering cache listeners on resume and OIDC logout attribute parsing.

    View source ↗
  4. 3mo ago

    WildFly 41 promotes OIDC scope and request-object support

    The 41.0.0 final promoted OIDC scope and request-object handling to default stability, the feature payload this patch line is now maintaining.

    View source ↗
  5. 4mo ago

    WildFly 41 Beta adds transactions during graceful shutdown

    The 41 Beta allowed transactions to continue through graceful shutdown, an operational refinement typical of where WildFly spends its feature budget.

    View source ↗
  6. 4mo ago

    WildFly 40.0.1 moves container images to JDK 25, drops JDK 17

    The previous line's patch release did the same job this one does — moving the runtime baseline forward rather than adding surface, in that case retiring JDK 17 from container images.

    View source ↗