oXygen-sdk

Download

oxygen-sdk@oxygenxml.com

December 2021

2 participants
2 discussions

[oXygen-user] [ann] Security maintenance builds in response to the Log4j vulnerability
by George Bina 17 Dec '21

17 Dec '21

Hi all, Following the recent security vulnerabilities related to the Apache Log4j library, we made available maintenance builds for many of our products and we also updated the SDK to provide a fix for this issue. These builds cover the latest versions of our products as well as older versions. The corresponding security advisory is updated with the latest information about this issue, you can find it at: https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html In this mail, I am highlighting the SDK updates but you can find the updates for product and plugins releases in the message sent to the oxygen-users list: https://www.oxygenxml.com/pipermail/oxygen-user/2021-December/006798.html If you are using the Oxygen SDK, please update to the latest SDK for the corresponding major version: Oxygen SDK v22.1.0.0 should be updated to version 22.1.0.6 Oxygen SDK from v23.0.0.0 to v23.1.0.0 should be updated to version 23.1.0.4 Oxygen SDK v24.0.0.0 should be updated to version v24.0.0.2 Please note that older versions of the Oxygen SDK, meaning the versions before 22.1.0.0, do not contain the log4j version 2 library, so they are not affected. Best Regards, George -- George Cristian Bina http://www.oxygenxml.com

1 0

[Ann] New critical security maintenance builds available for oXygen 24.0 (2021121518) and 23.1 (2021121415)
by Oxygen XML Editor Support (Adrian Buza) 16 Dec '21

16 Dec '21

Dear oXygen users, We announce the release of critical security maintenance builds for oXygen 24.0 (2021121518) and oXygen 23.1 (2021121415) for XML Editor, XML Developer, XML Author, XML WebHelp, PDF Chemistry, Publishing Engine. These builds have been created to resolve the recently discovered log4j vulnerabilities from: https://www.oxygenxml.com/security/advisory/CVE-2021-44228.html https://www.oxygenxml.com/security/advisory/CVE-2021-45046.html The build number can be verified in the Help -> About dialog box from the application (next to the version number). You can download the new installation kits for v24.0 from our web site: http://www.oxygenxml.com/download.html Here you can find the complete list of bug-fixes for v24.0: http://www.oxygenxml.com/build_history.html#2021061407 You can download the new installation kits for v23.1 from our software archive: https://www.oxygenxml.com/software_archive.html Here you can find the complete list of bug-fixes for v23.1: https://www.oxygenxml.com/build_history_23_1.html#2021121415 You can follow our oXygen release/build RSS feed here: http://www.oxygenxml.com/rssBuildID.xml Please let us know if you encounter any problems with these new builds. Regards, Adrian -- Adrian Buza oXygen XML Editor and Author Support

1 0