Third-Party Update: Netty

Netty has been updated to version 4.1.60.Final to avoid a security vulnerability of the previous version (CVE-2021-21295).

(CMS-19197)

Fixed CAE Feeder Application Start Delay

Fixed a bug that caused a long startup phase for the CAE Feeder.

(CMS-18823)

User Changes MongoDB Performance

The User Changes App , the Studio Server and the Workflow Server make better use of MongoDB indices when CapList instances like "My Edited Content" are persisted in MongoDB. This improves the performance, and will reduce the MongoDB server load, especially if many such lists are stored in MongoDB.

(CMS-18759)

XML Importer

The XmlImporter's DifferencingTransformer supports struct properties now.

(CMS-18619)

Fixed Solr hostname and port disclosure with malicious REST request

It was possible to create a manipulated bad Studio search request which produces an internal server error with an error message text produced by Solr containing the hostname and port. This error is caught now.

(CMS-18530)

Replicator state health indicator added to the Replication Servers

The Replication Server has now a health indicator added to reflect the state of the replication process. The indicator is available at :8081/actuator/replicator . The indicator will be set to:

In addition, the indicator can switch to DOWN if the event lag between Master Live Server and the replicator exceeds a threshold. The threshold can be configured using the property management.health.replicator.uncompleted-events-threshold . The threshold can be disabled by setting it to -1 , which is the default.

The indicator itself is disabled by default in the coremedia/content-server image as the image is also being used for content-management-server and master-live-server. In the docker-compose development setup the indicator has been enabled using the environment variable MANAGEMENT_HEALTH_REPLICATOR_ENABLED .

(CMS-18230)