[Oskari-user] Oskari 2.7.1 released!

Fri Apr 1 01:42:25 PDT 2022

Hi everyone,

a quick update has been made to update a library used by Oskari with recently discovered vulnerability: https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement After initial study the vulnerability is not directly exploitable in Oskari, but better be safe than sorry.

Note that the update is only for Oskari-server so frontend 2.7.x remains at version 2.7.0.

Cheers,
         Sami
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/oskari-user/attachments/20220401/e6360aba/attachment.html>