Changes for page eMagiz Runtime - 5.0.4

Last modified by Erik Bakker on 2023/01/23 13:55

From version 9.1
edited by Erik Bakker
on 2022/06/16 13:27
Change comment: There is no comment for this version
To version 11.1
edited by eMagiz
on 2022/06/22 13:56
Change comment: There is no comment for this version

Summary

Details

Page properties
Title
... ... @@ -1,1 +1,1 @@
1 -eMagiz Mendix Connector - 5.1.0
1 +eMagiz Runtime - 5.0.4
Author
... ... @@ -1,1 +1,1 @@
1 -XWiki.ebakker
1 +XWiki.eMagiz
Content
... ... @@ -1,14 +1,12 @@
1 -The 5.1.0 release of the eMagiz Mendix connector (EMC) has two small bug fixes and updates most of the userlib libraries to include the latest security fixes.
1 +Fourth maintenance release in the eMagiz 5.0.x line. This release fixes Log4J security vulnerabilities CVE-2021-44228 and CVE-2021-45046.
2 2  
3 -Find out more in our [release blog]
3 +Find out more in our [[Release blog>>Main.Release Information.Release Blogs.pache Log4J vulnerability patch - Release blog.WebHome||target="blank"]].
4 4  
5 5  
6 -===== Minor Changes =====
6 +===== Bug Fixes =====
7 7  
8 -* The uptime message did not always show the correct number of days the connector is running.
9 -* Synchronous exit flows without an import or an export mapping (string-only) caused an incorrect validation error.
8 +* Updated OPS4J Pax Logging version 1.10.1 to version 1.11.11. Internally this uses Apache Log4j 2, which is updated from version 2.8.2 to 2.16.0 in this release. This fixed the following two security vulnerabilities:
9 + ** https://nvd.nist.gov/vuln/detail/CVE-2021-44228 (CVSS score 10.0 - Critical)
10 + ** https://nvd.nist.gov/vuln/detail/CVE-2021-45046 (CVSS score 3.7 - Low)
10 10  
11 -===== Remarks =====
12 12  
13 -* Most of the userlib libraries were updated to include the latest security fixes.
14 -