Uploaded image for project: 'XWiki Commons'
  1. XWiki Commons
  2. XCOMMONS-2266

Upgrade to XStream 1.4.20

    XMLWordPrintable

Details

    • Unknown
    • N/A

    Description

      See http://x-stream.github.io/changes.html#1.4.20 (from 1.4.17)

      XStream moved to a white list system making its default pretty much unusable for jobs status, we'll need to check how we can workaround that. Another possibility being to move to another system but unless we can find one with the exact same format it can be a breaking change (impossible to read already serialized job status and more importantly break some job REST calls).

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. XCOMMONS-2541 CVE-2022-40151 because of XStream

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. XCOMMONS-1222 Find a workaround for new XStream (1.4.10) security framework limitation

          • Major - Major loss of function.
          • Closed

          Task - A task that needs to be done. XWIKI-21052 Check the CVEs for xstream

          • Major - Major loss of function.
          • Closed

          Activity

            People

              tmortagne Thomas Mortagne
              tmortagne Thomas Mortagne
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: