The Apache MyFaces team is pleased to announce the release of MyFaces Core 1.2.9.

MyFaces Core is a JavaServer(tm) Faces 1.2 implementation as specified by JSR-252. MyFaces Core has passed Sun's JSR-252 TCK and is 100% compliant with the JSR-252 specification.

Please note this release also contains a fix for:

MYFACES-2749 Encrypted View State does not include Message Authentication Code (MAC)

This fix prevents padding oracle attack on view state when client side state saving is used.

MyFaces Core 1.2.9 is available in both binary and source distributions.

   * http://myfaces.apache.org/download.html

MyFaces Core is also available in the central Maven repository under Group ID "org.apache.myfaces.core".

Release Notes - MyFaces Core - Version 1.2.9

Bug

   * [MYFACES-1834] - suffix added to component id when including files
* [MYFACES-1838] - javax.crypto.BadPaddingException: Given final block not properly padded * [MYFACES-2433] - Variable name error in oamClearHiddenInput and oamSetHiddenInput: use formname instead of formName
   * [MYFACES-2463] - CLONE -<f:param> violates the JSF spec
   * [MYFACES-2491] - _ErrorPageWriter does not print component properties
   * [MYFACES-2525] - Split javax.faces package in OSGi
* [MYFACES-2611] - UIComponentBase.getFacetsAndChildren() must not access the component's facets and children directly * [MYFACES-2684] - UIComponentBase.saveAttachedState save transient elements as null values on List case * [MYFACES-2685] - Cannot call invokeOnComponent on UIColumn without rowIndex * [MYFACES-2686] - javax.faces.FacesException: java.lang.NumberFormatException while initializing if MANIFEST.MF version exceeds int value * [MYFACES-2726] - CommandLink renderer do not escape \ characters in generated javascript * [MYFACES-2749] - Encrypted View State does not include Message Authentication Code (MAC)

Improvement

* [MYFACES-2679] - Use a constant to identify FacesCompositeELResolver.Scope value
   * [MYFACES-2680] - Cache renderKit used
* [MYFACES-2691] - Enhance MessageUtils adding methods when custom library bundle should be scanned
   * [MYFACES-2737] - Cache FacesContext on UIComponentBase instances

regards

Leonardo Uribe

Reply via email to