content/news/2024/06/17/wicket-8.16.0-released.html

<!DOCTYPE html> <html lang="en"> <head> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <meta charset="utf-8"> <title>Apache Wicket 8.16.0 released | Apache Wicket</title> <meta name="viewport" content="width=device-width, initial-scale=1" /> <link rel="shortcut icon" href="/favicon.ico" type="image/vnd.microsoft.icon" /> <link rel="stylesheet" href="/css/style.css" type="text/css" media="screen" /> <link href="/css/font-awesome.min.css" rel="stylesheet" /> <script src="/javascript/jquery-3.7.1.min.js"></script> </head> <body class=""> <div class="header default"> <div class="l-container"> <nav class="mainmenu"> <div class="nav-logo"> <a href="/"><img src="/img/logo-apachewicket.svg" alt="Apache Wicket"></a> </div> <div class="nav-container">  <a href="/start/quickstart.html" class=" nav-items">Quick Start</a>  <a href="/start/download.html" class=" nav-items">Download</a>  <a href="/learn" class=" nav-items">Documentation</a>  <a href="/help" class=" nav-items">Support</a>  <a href="/contribute" class=" nav-items">Contribute</a>  <a href="/community" class=" nav-items">Community</a>  <a href="/apache" class=" nav-items">Apache</a> </div> <div class="nav-container "> <a href="https://github.com/apache/wicket" rel="noreferrer" target="_blank"><i class="fa fa-github nav-items"></i></a> <a href="https://builtwithwicket.tumblr.com" rel="noreferrer" target="_blank"><i class="fa fa-tumblr nav-items"></i></a> </div> </nav> </div> </div> <main> <div class="l-container"> <header class="l-full preamble"> <h1>Apache Wicket 8.16.0 released</h1> </header> <section class="toc left post "> <div id="toc" class="toc"><div id="toc-title"><h2>Table of Contents</h2></div><ul><li class="toc--level-1 toc--section-1"><a href="#new-and-noteworthy"><span class="toc-number">1</span> <span class="toc-text">New and noteworthy</span></a></li><li class="toc--level-1 toc--section-2"><a href="#using-this-release"><span class="toc-number">2</span> <span class="toc-text">Using this release</span></a></li><li class="toc--level-1 toc--section-3"><a href="#upgrading-from-earlier-versions"><span class="toc-number">3</span> <span class="toc-text">Upgrading from earlier versions</span></a><ul><li class="toc--level-2 toc--section-4"><a href="#this-release"><span class="toc-number">3.1</span> <span class="toc-text">This Release</span></a></li></ul></li></ul></div> </section> <section> <div class="l-full"> <p class="meta">17 Jun 2024</p> <p>The Apache Wicket PMC is proud to announce Apache Wicket 8.16.0!</p> <p>Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at https://wicket.apache.org</p> <p>This release marks another minor release of Wicket 8. We use semantic versioning for the development of Wicket, and as such no API breaks are present in this release compared to 8.0.0.</p> <h2 id="new-and-noteworthy">New and noteworthy</h2> <p>This version contains a fix for ‘CVE-2024-36522 - Remote code execution via XSLT injection’</p> <h2 id="using-this-release">Using this release</h2> <p>With Apache Maven update your dependency to (and don’t forget to update any other dependencies on Wicket projects to the same version):</p> <figure class="highlight"><pre><code class="language-xml" data-lang="xml"><span class="nt"><dependency></span> <span class="nt"><groupId></span>org.apache.wicket<span class="nt"></groupId></span> <span class="nt"><artifactId></span>wicket-core<span class="nt"></artifactId></span> <span class="nt"><version></span>8.16.0<span class="nt"></version></span> <span class="nt"></dependency></span></code></pre></figure> <p>Or download and build the distribution yourself, or use our convenience binary package you can find here:</p> <ul> <li>Download: http://wicket.apache.org/start/wicket-8.x.html#manually</li> </ul>  <h2 id="upgrading-from-earlier-versions">Upgrading from earlier versions</h2> <p>If you upgrade from 8.y.z this release is a drop in replacement. If you come from a version prior to 8.0.0, please read our Wicket 8 migration guide found at</p> <ul> <li>http://s.apache.org/wicket8migrate</li> </ul> <p>Have fun!</p> <p>— The Wicket team</p> <p>========================================================================</p> <div class="language-plaintext highlighter-rouge"><div class="highlight"><pre class="highlight"><code>The signatures for the source release artefacts: </code></pre></div></div> <p>Signature for apache-wicket-8.16.0.zip:</p> <div class="highlight"><pre> -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAmZqB+QACgkQh48B+qjT VuGz+xAAqu5r2R39HGtVLFDQ+t26pP/0DNGZv95sJvPbAjZjlnmPvw2zrbM+p69/ G2JC1BYn9kSae2FVPALS6bcZ+c55Lg8atoA8o7RFOsbvQmRaXCXnU+ISu02xKlvg +6EL4a2aXka4jF4nDSWIBfU9jm9Nk3CTMwYKTVd0r7LdVEcANB/LCSq74j08/PVM CCh9vF0/FqLjC6GfD6uu6kL13r24aVk9RmvLXq5uZIOs/nnsfEx5jZtH818kdqre fvuuT3wbTUJye9DDpuKTESAzMo+aXTKP9M1+pZOmiKnTDiN2aFi02vCo7YrmWpKO +03LiQt5WZorDUamuBZwetzWajA1lyc+SGWwgnTCTEOkvZ6hMq3zRvo1awb+w0GL hKGspHRWrlXuwueaIT7/ZDyE26UzIR+oo7l5C0iXPZkAz9ejG6lyoQz4B0sifJlC ob3j5goApWIXBZMX/FyU1pHivLEbY7Uf8PNcq0g/NYtNuSk+/3yENH1cW+79gWEW XvaxYfrhTjyIxhnv3cPz3erwSZTHA3r1xURrOYlrlsv8Aqd+Jj+USUhRPP60mc/W S9bM3o05eFsZVY1rtJVfGl+nYuFEri1T8RgWNeolAdh37S5wdJy+iHn0jUnsPMQK d27lFJ5neYqYC4F826vwBKDIg8FWUyrX1CDKfXidkJV/IAA03NE= =Wi7u -----END PGP SIGNATURE----- </pre></div> <p>Signature for apache-wicket-8.16.0.tar.gz:</p> <div class="highlight"><pre> -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE0a6YZHC1pJw+aieyh48B+qjTVuEFAmZqB+QACgkQh48B+qjT VuEdjA/+P1szVHdIcom1H1hBTFBSaVaEM8aGf2S4dGplaFiHF3tySsvXzWnbFApU 7ycylRMheTz6BXRTpo1XGC57WNiqKCE5R9EFZkPqQiQMoFVb6lmEtTQqV+l8Tbxb L2D1HEN3FhZ/KfPGKm6q46bjMfvfC+hb2mFbcsA8EftnkyKkZ0QfSYfXOCFSaEmF mEruwXLeQAx2VRTzXgJzhQanjmNiqb1o7x0lCF26m7J6fgXMk+dl7wMg1/Lzl+tV 8It+eD598zs19hoytO5lKLDVbLPeSVAfxYEChH5BTpR2MTjY2YDBtngo8U5HtHTs Sd0ICr/oOAWbu86GKCyMNk+uYNdcQCEZtdA4/qQUTq4O0UsFS5UcAUWT4Z0uoq3S 6c4Aa6S2faPw4ThhaCWSO56PMN3xKBAmERA8gmADv41PHh4N3BDuTANB3bwSrN/3 b1I39Hxol+OXyuKMnivMeG9OdjoalSlSMhZkA4Tu0dokiZpDVslKltQcnApZdOyd 6BQuF7j8sQugiZLjtRPzyvIMo3oILNz1bVLOvltYEKI/AB4+C9ShBIX+EO1KlThO 0P2PjZXgPKNPKS51EsFGZa33tMEDCiuITEDGFeH0XveEnG0BLbBkE/Yx5lJfULdr hZzNoF2E7tbktMsC0fSIoSQ6rCwrgeF0FTqZrkQuuKzMFJ1fdck= =4MXn -----END PGP SIGNATURE----- </pre></div> <p>========================================================================</p> <h3 id="this-release">This Release</h3> <h4 id="changelog-for-8160">CHANGELOG for 8.16.0:</h4> <h5 id="bug">Bug</h5> <ul> <li>[WICKET-7056] - HttpSessionStore#getAttribute called on invalidated session</li> </ul> </div> </section> </div> </main> <footer> <div class="l-container l-flex"> <div class="l-one-third left"> <a href="https://www.apache.org">Apache</a><br> <a href="https://www.apache.org/licenses/">License</a><br> <a href="https://events.apache.org/x/current-event">Events</a><br> </div> <div class="l-one-third"> <a href="https://www.apache.org/foundation/sponsorship">Sponsorships</a><br> <a href="https://www.apache.org/foundation/thanks">Thanks</a><br> </div> <div class="l-one-third"> <a href="https://www.apache.org/security">Security</a><br> <a href="https://privacy.apache.org/policies/privacy-policy-public.html">Privacy</a><br> </div> </div> <div class="l-container"> <div class="left"> <img src="/img/asf_logo_url.svg" style="height:90px; float:left; margin-right:10px;"> <div style="margin-top:12px;">Copyright © 2025 — The Apache Software Foundation. Apache Wicket, Wicket, Apache, the Apache feather logo, and the Apache Wicket project logo are trademarks of The Apache Software Foundation. All other marks mentioned may be trademarks or registered trademarks of their respective owners.</div> </div> </div> </footer> </body> </html>

content/news/2024/06/17/wicket-8.16.0-released.html (153 lines of code) (raw):