Release Notes / Version 10.2107
Table Of ContentsUpdate of Docker Image of Java-Application-Base
The Java Application Base image of all Spring Boot applications has been updated to version 2.4.5 to fix CVE-2022-34169.
The new release includes updated to the latest version 11.0.16 of the respective JDKs.
See https://hub.docker.com/r/coremedia/java-application-base for details.
(CMS-21975)
Fixed Unified API Bug in Working Version References
Fixed a bug in the Unified API when retrieving references to other content items for the working version of some content. Before the fix, methods
Version#getReferences()
,
Version#getReferencesMap()
, and
Version#getReferences(CapPropertyDescriptor)
could return outdated data for the special so-called "working version" (compare Version#isWorkingVersion).
(CMS-21881)
Third-Party Update: org.json:json
The Java third-party library org.json:json has been updated to version 20220320 to avoid reported security vulnerabilities of previous versions.
(CMS-21809)
Third-Party Update: Netty
Netty has been updated to version 4.1.77.Final to avoid security vulnerabilities of previous versions.
(CMS-21624)
Third-Party Update: ESAPI
The third-party library
org.owasp.esapi:esapi
has been updated to version 2.4.0.0 to avoid security vulnerabilities reported for previous versions.
(CMS-21553)
Fix Catalog Repository Toolbar icon
Create product teaser icon on the catalog repository toolbar is displayed correctly
(CMS-21453)