CloudBees Replication Parent 1158

1 minute read

RELEASED: Public: November 15, 2023

Security advisory

See the CloudBees Security Advisory 2023-11-15

Security fixes

Upgrade hazelcast to 5.3.5 to fix a vulnerability affecting transitive dependency org.json:json (BEE-41471)

The previous version of org.json:json vendored by Hazelcast was affected by CVE-2023-5072.

The new version of Hazelcast has upgraded this dependency to avoid any issue.

New features

None.

Feature enhancements

None.

Resolved issues

None.

Known issues

None.

Upgrade notes

None.