Skip to content

OPC Publisher Release 2.5.5
Compare
Choose a tag to compare
@marcschier marcschier released this 01 Oct 10:15
2.5.5
7a2111f

This release updates the 2.5 version of OPC Publisher (2.5.4) to fix several critical vulnerabilities. Changes included in this release:

  • Update nuget dependencies to latest and SDK to .net core 3.1. Fixes several critical vulnerabilities. Including CVE-2021-26701, CVE-2019-19135, CVE-2020-8867, CVE-2019-0980, CVE-2019-0981, CVE-2020-29457
  • Update base images to latest to fix several critical vulnerabilities in 2.5.4.
  • Update Linux base images to Alpine (from Debian) which lowers the size of the OPC Publisher Linux container from 204 to 104 MB.
  • Remove dependency on Bouncy castle (*).

This release supersedes all previous releases of OPC Publisher 2.5, including 2.5.4, which will not be supported anymore. Please update to 2.5.5 to ensure you are running the most secure version of 2.5.

(*) Please note: This change removes the SecureIoTHubToken feature which allowed secure storage of connection strings at the edge. This feature predates IoT Edge. Since IoT Edge provides secure storage of connection strings, and since only IoT Edge has ever been supported as runtime for OPC Publisher 2.5, this should not have any impact on existing production scenarios.

Assets 2
Loading