The English version of quarkus.io is the official project site. Translated sites are community supported on a best-effort basis.

Quarkus 1.0.1.Final released - Important security fix

We just released 1.0.1.Final to fix an important security issue introduced in CR2 and still present in 1.0.0.Final.

Please upgrade to this version as soon as possible if you are using our security layer.

変更点

Security issue fix

If you are using our security annotations (e.g. @RolesAllowed) and also other annotations (such as Bean Validation annotations) on the parameters of your secured methods, the security checks would entirely be bypassed.

This issue was originally reported here: https://github.com/quarkusio/quarkus/issues/5763 .

1.0.1.Final fixes this issue and upgrade is highly recommended.

完全な変更履歴

参加のお誘い

私達は皆様からのフィードバックに重きを置いています。バグ報告、改善要望を是非お願いします。一緒に素晴らしいものを作り上げていきましょう!

Quarkusユーザーの場合でも、単に興味を持っているだけの場合でも、恥ずかしがらずにコミュニティに参加して下さい!: