From ecf0f152c140c45e87b6c1ce44d29918d688caf2 Mon Sep 17 00:00:00 2001 From: Les Hazlewood <121180+lhazlewood@users.noreply.github.com> Date: Mon, 17 Jun 2024 12:08:34 -0700 Subject: [PATCH] Fixes #949 --- CHANGELOG.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 36cd5a450..cd6e8de4d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,13 +2,13 @@ ### 0.12.6 - This patch release: * Ensures that after successful JWS signature verification, an application-configured Base64Url `Decoder` output is used to construct a `Jws` instance (instead of JJWT's default decoder). See [Issue 947](https://github.com/jwtk/jjwt/issues/947). -* Fixes a GZIPInputStream memory leak surfaced in the 0.12.0 release. See [Issue 949](https://github.com/jwtk/jjwt/issues/949). +* Fixes a GZIPInputStream decompression memory leak introduced in 0.12.0 that surfaces only in + concurrent/multi-threaded environments (when decompressing JWTs with `zip` header of `GZIP`). See [Issue 949](https://github.com/jwtk/jjwt/issues/949). ### 0.12.5