| Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
|---|---|---|---|---|---|---|
| JDK-8319679 | 8u411 | Ravi Reddy | P4 | Resolved | Fixed | b01 |
Xalan-Java 2.7.3 was released in April 2023. The major changes were:
- Security fix: CVE-2022-34169: An integer truncation issue
- Updated BCEL to: 6.7.0
- Upped Java version requirement to: 8 with other build improvement
- Other bug fixes
The JDK fixed the vulnerability (CVE-2022-34169) in CPU 22_07.
The JDK has already updated BCEL to 6.7.0.
Among the other bug fixes, one performance improvement (XALANJ-2607) was worth noting though it applied to a specific use case (using ID attributes) and with very large documents (the example given was with a list of 1,000,000 entries).
- Security fix: CVE-2022-34169: An integer truncation issue
- Updated BCEL to: 6.7.0
- Upped Java version requirement to: 8 with other build improvement
- Other bug fixes
The JDK fixed the vulnerability (CVE-2022-34169) in CPU 22_07.
The JDK has already updated BCEL to 6.7.0.
Among the other bug fixes, one performance improvement (XALANJ-2607) was worth noting though it applied to a specific use case (using ID attributes) and with very large documents (the example given was with a list of 1,000,000 entries).
- backported by
-
JDK-8319679 Update Xalan Java to 2.7.3
-
- Resolved
-
- relates to
-
JDK-8301269 Update Commons BCEL to Version 6.7.0
-
- Resolved
-
