v2.14.7

cferreiragonz released this 08 Sep 07:07

· 4 commits to 2.14.x since this release

010b908

Fast DDS v2.14.7

This release includes the following CVE fixes, bugfixes, improvements and CI improvements.

Security fixes (CVEs)

These CVEs were addressed in squashed commits applied directly from privately reviewed branches (no public PR):

Fix CVE-2026-22591 (CVE-2026-22591)
Fix CVEs in Access Control parser (CVE-2026-45094, CVE-2026-45095, CVE-2026-45096)
Fix several CVEs (CVE-2025-63829, CVE-2025-65865, CVE-2026-45093, CVE-2026-45092)
Fix CVE-2025-67108 (CVE-2025-67108)
Fix several deserialization CVEs (CVE-2026-49861, CVE-2026-53589, CVE-2026-45098, CVE-2026-49862, CVE-2026-55063, CVE-2026-49863, CVE-2026-53588, CVE-2026-53590)
Fix integer overflow in PartitionQosPolicy CDR deserialization (GHSA-8g7x-c9fg-g6mh)

Fixes

Fix RTPSParticipantAttributes internal data races (#6389)
Catch exception when constructing a payload pool Node (#6462)
Fix dereference error of 'shared_secret_handle' (#6407)
Assert liveliness with periodic heartbeats in secure participants (#6414)
Make on_xxx_matched thread-safe (#6382)
Fix data races on DataWriterImpl QoS access (#6424)
Remove stale tcp channels (#6459)
Fix unused variable on GCC 16 (#6466)
Fix datasharing infinite loop (#6494)
Fix shared-memory segment crash on port open (#6507)

Improvements

Regenerate types with Fast DDS Gen 3.3.3 (#6515)
Update Fast CDR submodule (#6519)

CI improvements

Improve windows tests (#6377)
Update security tests to use governance-based encryption configuration (#6396)
Add UBSan workflow and solve its errors (#6417)
Make skip-ci label report required statuses as pass (#6445)
Fix Docs after HTML zip refactor (#6522)

PRs (merge order): #6389, #6445, #6462, #6377, #6396, #6407, #6414, #6382, #6424, #6459, #6466, #6494, #6417, #6507, #6515, #6519, #6520, #6522

Assets 2