Quarkus 2.16.12.Final released - Maintenance release
As mentioned in previous blog posts, we encourage all our community users to upgrade to Quarkus 3.
Most of the heavy lifting can be done with quarkus update
but be aware that some components were updated to new major versions
and that migrating might require some time and careful testing if you are using these components.
We will continue to maintain 2.16.x until the end of October so we recommend that you start your migration process very soon. Today, we released Quarkus 2.16.12.Final, the twelfth maintenance release of our 2.16 release train.
This release fixes several CVEs:
-
CVE-2023-44487 for Netty
-
CVE-2023-39410 for Apache Avro
-
CVE-2023-34454 for Snappy
It should be a safe upgrade for anyone already using 2.16.
If you are not already using 2.16, please refer to our migration guide.
Full changelog
You can get the full changelog of 2.16.12.Final on GitHub.
Come Join Us
We value your feedback a lot so please report bugs, ask for improvements… Let’s build something great together!
If you are a Quarkus user or just curious, don’t be shy and join our welcoming community:
-
provide feedback on GitHub;
-
craft some code and push a PR;
-
discuss with us on Zulip and on the mailing list;
-
ask your questions on Stack Overflow.
