From 0bcb8da02d04256d1d40344cb423a76ec154447e Mon Sep 17 00:00:00 2001 From: navaneethsnair1 Date: Tue, 21 Apr 2026 17:24:45 +0530 Subject: [PATCH] updates to 26.0.0.4 GA blog --- blog_tags.json | 15 ++++++++++----- posts/2026-04-21-26.0.0.4.adoc | 10 +++------- 2 files changed, 13 insertions(+), 12 deletions(-) diff --git a/blog_tags.json b/blog_tags.json index 05b2b9e66..d7b381ce4 100644 --- a/blog_tags.json +++ b/blog_tags.json @@ -2,7 +2,8 @@ "blog_tags": [ { "name": "announcements", - "posts": ["26.0.0.4-beta", "26.0.0.3", "26.0.0.3-beta", + "posts": ["26.0.0.4", "26.0.0.4-beta", + "26.0.0.3", "26.0.0.3-beta", "26.0.0.2", "26.0.0.2-beta", "26.0.0.1", "26.0.0.1-beta", "25.0.0.12", "25.0.0.12-beta", @@ -100,7 +101,8 @@ "featured": "true" },{ "name": "microprofile", - "posts": ["26.0.0.3", "25.0.0.8", "25.0.0.7-beta", + "posts": ["26.0.0.4", "26.0.0.3", + "25.0.0.8", "25.0.0.7-beta", "25.0.0.6", "25.0.0.6-beta", "25.0.0.5", "25.0.0.4", "25.0.0.4-beta", "microprofile-telemetry-20", @@ -175,7 +177,8 @@ }, { "name": "java-se", - "posts": ["26.0.0.4-beta", "26.0.0.3", "25.0.0.10", + "posts": ["26.0.0.4", "26.0.0.4-beta", + "26.0.0.3", "25.0.0.10", "25.0.0.10-beta", "25.0.0.6", "25.0.0.6-beta", "25.0.0.4", "25.0.0.4-beta", "24.0.0.10", @@ -196,7 +199,8 @@ }, { "name": "release", - "posts": ["26.0.0.4-beta", "26.0.0.3", "26.0.0.3-beta", + "posts": ["26.0.0.4", "26.0.0.4-beta", + "26.0.0.3", "26.0.0.3-beta", "26.0.0.2", "26.0.0.2-beta", "26.0.0.1", "26.0.0.1-beta", "25.0.0.12", "25.0.0.12-beta", @@ -331,7 +335,8 @@ }, { "name": "security", - "posts": ["26.0.0.4-beta", "26.0.0.3", "25.0.0.12", "25.0.0.12-beta", + "posts": ["26.0.0.4", "26.0.0.4-beta", "26.0.0.3", + "25.0.0.12", "25.0.0.12-beta", "25.0.0.9", "25.0.0.9-beta", "25.0.0.3", "25.0.0.3-beta", "25.0.0.2", "25.0.0.1-beta", diff --git a/posts/2026-04-21-26.0.0.4.adoc b/posts/2026-04-21-26.0.0.4.adoc index d9910348a..81651858b 100644 --- a/posts/2026-04-21-26.0.0.4.adoc +++ b/posts/2026-04-21-26.0.0.4.adoc @@ -22,7 +22,7 @@ This release introduces support for selecting JWT signature algorithms from JOSE In link:{url-about}[Open Liberty] 26.0.0.4: -* <> +* <> * <> * <> * <> @@ -111,17 +111,13 @@ If you're using link:https://plugins.jetbrains.com/plugin/14856-liberty-tools[In [link=https://stackoverflow.com/tags/open-liberty] image::img/blog/blog_btn_stack.svg[Ask a question on Stack Overflow, align="center"] -[#TAG_1] +[#file_transfer] === File Transfer changes for 26.0.0.4 Liberty's FileService MBean provided by the `restConnector-2.0` feature now includes an extra `blocklist` attribute. This attribute is configured by the `` config element in the `server.xml` file. The default value of this attribute is `${server.output.dir}/resources/security`. This behavior change resolves the security vulnerability link:https://github.com/advisories/GHSA-c39w-6qgm-5cp7[CVE-2025-14915], by restricting default FileTransfer access to `${server.output.dir}/resources/security`. If FileTransfer access to `${server.output.dir}/resources/security` is required, the original behavior can be restored by setting an empty blocklist. -For more information, see: - -* link:https://www.ibm.com/docs/en/was-liberty/nd?topic=liberty-list-provided-mbeans#rwlp_mbeans_list__FileService[] -* link:https://www.ibm.com/docs/en/was-liberty/nd?topic=liberty-list-provided-mbeans#rwlp_mbeans_list__FileTransfer[] -* link:https://www.ibm.com/docs/en/was-liberty/nd?topic=manually-file-transfer[] +For more information, see the link:https://www.ibm.com/docs/en/was-liberty/nd?topic=manually-file-transfer[documentation]. [#ltpa] == Default LTPA keys password removal