Chapter 7. Resolved Issues

When using @IndexedField(index=true), a Java exception could be generated.

This issue is resolved as of JBoss Data Grid 7.1.2.

JBoss Data Grid previously included Protostream 4.1.1, which would not work with Apache Karaf. Protostream has been upgraded to 4.1.3.

This issue is resolved as of JBoss Data Grid 7.1.2.

A vulnerability was found in Jasypt that would allow an attacker to perform a timing attack on password hash comparison. Jasypt has been removed.

This issue is resolved as of JBoss Data Grid 7.1.2.

A deserialization flaw in jackson-databind was found allowing code execution when given maliocusly crafted input to readValue method of ObjectMapper. jackson-databind has been removed.

This issue is resolved as of JBoss Data Grid 7.1.2.

A vulnerability in Infinispan was found which allowed malicious users to inject malicious serialized objects into the server’s data cache and potentially execute arbitrary code on another user’s computer when the malicious data was fetched using the hot rod protocol.

This issue is resolved as of JBoss Data Grid 7.1.2.

When the server was started the above warning message could be generated. This was caused by RESTEasy performing a class check while registering resources when classes didn’t match.

This issue is resolved as of JBoss Data Grid 7.1.2.