Repository navigation
·
2 commits
to ea
since this release
- [CORE-66] NOTE: XStream 1.4.20 has CVE-2024-47072. This issue occurs when a library is configured to use the
BinaryStreamDriver. We don’t use this, however upgrading to XStream 1.4.21 didn’t previously work for Map.
- Upgraded the optional XStream dependency from
1.4.20to1.4.21. - Preserved ChronicleMap JSON/Jettison deserialisation compatibility across the XStream upgrade.
- ChronicleMap can now read both the legacy double-
cmapJSON shape produced with XStream/Jettison1.4.20and the current flatter shape exposed by XStream/Jettison1.4.21. - Improved the internal XStream converter structure for ChronicleMap by separating entry and entry-list reading logic.
- Added regression tests and pinned JSON fixtures to protect compatibility with both legacy and current XStream/Jettison serialisation shapes.
- [CORE-87] Fix persisted map entry checksum alignment.