Skip to content

Commit

Permalink
Update DSP-23187 release note (#174)
Browse files Browse the repository at this point in the history
This commit amends the release note of DSP-23187 by
adding the remark about the order of polygon points
in the JSON representation.
  • Loading branch information
szymon-miezal authored Nov 27, 2024
1 parent a8fe6ec commit a355a0d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion DSE_6.8_Release_Notes.md
Original file line number Diff line number Diff line change
Expand Up @@ -539,7 +539,7 @@ If you're developing applications, please refer to the [Java Driver documentatio
* Fixed regression scenario where DSE was not using keys on the KMIP server that were created either by a previous DSE version or outside of DSE. Regression was introduced in DSE v6.8.22. (DSP-23182)

## 6.8.34 DSE CVE
* Upgraded `org.json:json` to `20230227` to resolve a Denial of Service (DoS) vulnerability. In addition, upgraded `esri-geometry-api` to `2.2.4`. (DSP-23187, [CWE-400](https://nvd.nist.gov/vuln/detail/CWE-400))
* Upgraded `org.json:json` to `20230227` to resolve a Denial of Service (DoS) vulnerability. Additionally, upgraded `esri-geometry-api` to `2.2.4`, which now follows the OGC and GeoJSON standard for polygon serialization. As a result, polygons' JSON representation is serialized with the exterior polygon in counterclockwise order and interior polygons (holes) in clockwise order. (DSP-23187, [CWE-400](https://nvd.nist.gov/vuln/detail/CWE-400))
* Upgraded commons-fileupload to 1.5. Added a solrconfig.xml setting that limits the number of files allowed in multipart update requests. (DSP-23188, [CVE-2023-24998](https://nvd.nist.gov/vuln/detail/CVE-2023-24998))
* Upgraded Apache Tomcat to version 8.5.87. (DSP-23205, [CVE-2023-24998](https://nvd.nist.gov/vuln/detail/CVE-2023-24998))

Expand Down

0 comments on commit a355a0d

Please sign in to comment.