Versions Compared

Old Version 1

changes.mady.by.user Roy Bissels

Saved on

compared with

New Version 2

changes.mady.by.user Joost Koehoorn

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Identifier

Component

Issue

Solution

BQ-22898

 

Studio

If a migration change exists for a removed element, committing changes would fail if the delete itself was not included in the commit.

The migration change can now be committed without having to select the user change as well.

BQ-22868

 


CVE-2024-22262 has been detected on the Runtime and services.

For 16, it's addressed by upgrading spring-framework to 6.16. For 15 and 14 it's addressed it by upgrading spring framework to 5.3.34.

BQ-22867

 


CVE-2024-29857,
CVE-2024-30171, CVE-2024-30172 have been detected on the Runtime and services.

Addressed by upgrading bouncy castle to 1.78.

CSD-5213

 

Runtime

The AQ_Timeline container would search and retrieve all timeline entries in the database if the case id or user id parameter resulted in an empty list. This could lead to possible memory and security issues.

The AQ_Timeline container will now not perform a search at all when the case id or user id paramater results in an empty list and will show an empty timeline. The reason why a timeline container is empty will now be logged.

CSD-5202

Studio

Restoring a backup would only report an error in the log when a repository could not be restored, while the restore request would succeed without indicating that the backup hadn't been fully restored.

An error response with status 500 is now returned to indicate that the backup could not be fully restored.