You are viewing the documentation for Blueriq 15. Documentation for other versions is available in our documentation directory.
Identifier | Component | Issue | Solution |
|---|---|---|---|
CSD-4500 | Runtime | CVEs found on Runtime. CVE-2022-41881 | Upgraded versions of Netty and Apache. See Blueriq Runtime Vulnerabilities. |
BQ-18302 | Although the case engine does not use the timer, it is still triggered every hour | Disabled the timer completely. Note that as a side effect, System.TODAY wil no longer be updated, but this should not affect the case engine. | |
BQ-18249 | Runtime | Session fixation protection was skipped on authentication controller methods which includes authentication using a custom theme and authentication using OpenID Connect. | The session fixation strategy has been applied to those controller methods. |
CSD-4481 | Encore | Encore did not report an error for duplicate global elements in another library. | Duplicates of globals in another library are now detected. |
BQ-17080 | Runtime | The actuators are causing warnings in the logging at startup. This might result in the actuator endpoint not working. | endpoints are renamed to follow Spring convenctions, so there are no warnings. |
CSD-3987 | Runtime | When the field mail port in model wasn't filled out information about unsuccesfull parsing of that value was logged. | When field is not filled out skipping attempt to parse that value as that would result in error. |
Overview
Content Tools