Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Identifier

Component

Issue

Solution

BQ-17547

 


CVE-2020-15522 was reported on a Bouncycastle dependency.

The Bouncycastle dependencies were upgraded to 1.67. Additionally, some libraries had to be updated to prevent version conflicts.

CSD-4309

 


If running behind a reverse proxy server, in the development dashboard, some webservice links would not be rewritten to match the proxy server configuration, but they would display the internal URL structure.

This has been fixed.

CSD-3966, CSD-3403, CSD-2690

JAVA

Runtime

When using the AQ_RestServiceClient the response message is not interpreted when the response content type is application/problem+json

application/problem+json is a default content type for REST response which are errors. Therefore we have added application/problem+json and application/problem+xml as accepted default content types.

CSD-4390RuntimeCVE-2022-42004 was discovered for jackson-databind prior to version 2.13.4. For Runtime 15.x, spring-framework has been updated to the latest version where this issue is fixed.Updated jackson-databind to 2.13.4