You are viewing the documentation for Blueriq 15. Documentation for other versions is available in our documentation directory.

Identifier

Component

Issue

Solution

BQ-21078

 

CVE-2023-34042 has been detected for spring-security-config 6.1.3 and 5.7.10.

Fixed by updating spring-security-config to version 6.1.4 and 5.7.11

BQ-21064

Audit Consumer, JAVA Runtime

CVE-2023-4759 was detected for Eclipse JGit lower than 6.6.1.

Fixed by updating Eclipse JGit to version 6.6.1

BQ-20743

Encore

The aggregate editor in Encore could incorrectly show relations as invalid, or may cause the browser to hang when removing relations.

The editor has been completely revamped to address these issues, as well as improving how relations are shown in the editor.

BQ-20080

JAVA Runtime

Debug logging is polluted with unrecognizable stack traces which cannot related to the an actual failure for the AbstractSessionAwareFilter

Additional logging was added to determine whether exceptions that occurred during the logic of the AbstractSessionAwareFilter were recoverable and relatable to actually errors. It seem that they were not and therefore the logging is removed.

CSD-4499

JAVA Runtime

When defining the following property connection.restservice.http.header.auth-header in a application.properties file and in a second property file which is activated by a profile. The property from the application.properties was picked up instead the one declared in the profile properties file.

Reading certain properties, for instance header properties for http connections, did not follow the property overloading mechanism which was expected.
We have fixed this behavior and properties are now loaded in their ordered precedence.

  • No labels