...
- CVE-2017-5649: Apache Geode information disclosure vulnerability
- CVE-2017-9794: Apache Geode gfsh query vulnerability
- CVE-2017-9797: Apache Geode client/server authentication vulnerability
- CVE-2017-9795: Apache Geode OQL method invocation vulnerability
- CVE-2017-9796: Apache Geode OQL bind parameter vulnerability
- CVE-2017-12622: Apache Geode gfsh authorization vulnerability
- CVE-2017-15696 Apache Geode configuration request authorization vulnerability
- CVE-2017-15692 Apache Geode unsafe deserialization in TcpServer
- CVE-2017-15693 Apache Geode unsafe deserialization of application objects
- CVE-2017-15695 Apache Geode remote code execution vulnerability
- CVE-2017-15694 Apache Geode metadata modification vulnerability
- CVE-2019-10091 Apache Geode SSL endpoint verification vulnerability
1.13.3
This patch release includes a number of bug fixes, including an issue with session state expiration.
Changes since last release:
- Several fixes in the session state module.
- Fix for server not stopping completely on shutdown.
- Fix for incorrect CQ event being sent in some cases.
- Fixed rebalance compatibility issue during rolling upgrade.
- Improved compatibility during upgrade from earlier versions of Geode.
- Improvements to disconnect handling, p2p connections, and idle expiration.
- Dependency bumps for json-smart, spring, spring-security, and jetty.
A full list of issues that were resolved can be found at https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12349841
1.13.2
This patch release includes a number of bug fixes, including some critical fixes if upgrading from an earlier version of Geode.
...
A full list of issues that were resolved can be found at https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12349381
1.13.1
This patch release includes a number of bug fixes, including some critical fixes if using TLS communication.
...