You are viewing the documentation for Blueriq 13. Documentation for other versions is available in our documentation directory.

Identifier

Component

Issue

Solution

BQ-16019

JAVA Runtime

CVE-2022-24891 was reported on the esapi third party library.

We updated the esapi library to version 2.4.0.0, which doesn't contain the vulnerability.

BQ-15973

JAVA Runtime

CVE-2022-23457 was reported on the esapi third party library.

We updated the esapi library to version 2.4.0.0, which doesn't contain the vulnerability.

CSD-4098

JAVA Runtime

In certain circumstances, where the process engine was called directly from custom code, unlocking a case would lead to an exception.
Additionally, the legacy toggle blueriq.legacy.use-legacy-case-unlocking did not properly revert the behavior case unlocking in the process engine to the previous implementation.

A method regarding case unlocking now runs in a database transaction.
The legacy toggle was passed improperly to one location where it was used. We now consider the legacy toggle properly.

CSD-4092

 

The name of a repository and branch was inadvertently limited to 50 characters, which should have been 100 characters instead.

Repository and branch names can now be 100 characters again, aligning with the validation that is done by the Studio client.
  • No labels

Didn't find the answer you were looking for? Try the advanced search!