Skip to main content
Version: 6.18

Security and authentication improvements

The following improvements regarding security have been made.

61.8.4.0​

Third-party library changes​

The following third-party libraries have been updated or replaced in this ConSol CM version:

  • asm (#669793, #669828): Updated to version 9.11
  • axios (#669708): Updated to version 1.20.0
  • bcpkix-jdk18on (#669542): Updated to version 1.86
  • docx4j (#669793): Updated to version 11.5.14
  • dompurify (#669708): Updated to version 3.4.16
  • form-data (#668764): Updated to version 4.0.6
  • formio/js (#669794): Updated to version 5.7.0
  • formio/react (#669794): Updated to version 6.2.2
  • freemarker (#669540, #669546): Updated to version 2.3.35
  • guava (#669793, #669828, #669829): Updated to version 33.7.2
  • http-proxy-middleware (#668764): Updated to version 3.0.7
  • immutable (#668764): Updated to version 5.1.9
  • jackson (#669538, #669539, #669540, #669542, #669790, #669793): Updated to versions 2.18.11 and 2.21.7
  • jsoup (#669793): Updated to version 1.23.2
  • js-yaml (#669708): Updated to version 4.3.2
  • jxb-runtime (#669793): Updated to version 4.0.8
  • log4j (#668854): Updated to version 2.25.5
  • logback (#669787, #669788, #669789, #669790, #669793): Updated to version 1.6.5
  • micrometer (#669793): Updated to version 1.16.7
  • moment (#669546, #669707, #669708): Updated to version 2.31.0
  • nanoid (#669543): Updated to version 3.3.19
  • netty (#669539, #669541, #669542, #669544, #669546): Updated to version 4.1.138 and 4.2.18
  • opennlp-tools (#669546): Updated to version 2.5.12
  • postcss (#669543): Updated to version 8.5.28
  • postgres (#669788 #669789, #669793): Updated to version 42.7.14
  • react-router (#668764, #669544): Updated to version 6.30.6 and 7.18.4
  • reactor-core (#669539): Updated to version 3.8.7
  • reactor-netty-core (#669539): Updated to version 1.3.7
  • sanitize-html (#669543): Updated to version 2.17.7
  • snappy-java (#669787): Updated to version 1.1.10.10
  • source-map-js (#669792): Updated to version 1.2.2
  • tika-core (#669546): Updated to version 3.3.2
  • tomcat (#669541, #669540, #669544): Updated to version 10.1.59
  • wicket (#669546): Updated to version 10.11.0
info

The users need to update CM/Doc for this change to become effective.

6.18.4.1​

Infinispan cache hardened (#669862)​

The server-side cache (Infinispan) has been hardened against potential deserialization attacks in cluster environments.

Third-party library changes​

The following third-party libraries have been updated or replaced in this ConSol CM version:

  • asm (#669881, #669886): Updated to version 9.11.1
  • jackson (#669880, #669881, #669882, #669883, #669884, #669886): Updated to version 2.21.8
  • sanitize-html (#669885): Updated to version 2.18.1 (6.18.4.1)
info

The users need to update CM/Doc for this change to become effective.