You are viewing the documentation for Blueriq 13. Documentation for other versions is available in our documentation directory.
Identifier |
Component |
Issue |
Solution |
|---|---|---|---|
BQ-21304 |
|
Several CVEs have been reported on the runtime: CVE-2023-44487 (a problem with Netty), CVE-2023-44483 (a problem with xmlsec) and CVE-2023-4759 (a problem with JGit). |
All the CVEs have been addressed. CVE-2023-44487 by upgrading Netty, CVE-2023-44483 by upgrading xmlsec and CVE-2023-4759 turned out to be a false positive, it was already fixed in the version we are shipping, but the dependency checker incorrectly links the CVE to the fixed version. This is suppressed. |
BQ-21279 |
|
CVE-2023-34050 has been reported on the spring-amqp library. |
For R16/15/14, this has been fixed by upgrading Spring Boot/underlying spring-amqp libraries. For older versions, there is no upgrade path. Upgrade to a more recent version of Blueriq and in the meantime take the measures as outlined by https://spring.io/security/cve-2023-34050
. |
Overview
Content Tools