Releases: quickfix-j/quickfixj
2.3.2
This is a bug fix release. It contains only few bug fixes and upgrades the MINA library to 2.2.4 since prior versions are vulnerable to RCE: https://www.cve.org/CVERecord?id=CVE-2024-52046 . However, QFJ is not directly affected by this since it does not use the affected ObjectSerializationCodecFactory.
https://github.com/quickfix-j/quickfixj/wiki/QuickFIX-J-2.3.2-release-notes
2.3.1
This is a bug fix release. It contains a fix for an issue which could lead to an infinite loop and/or out-of-memory condition on reception of a malformed message, hence rendering the application unusable. All QFJ versions below 2.2.1 and 2.3.1 are affected by this bug.
https://github.com/quickfix-j/quickfixj/wiki/QFJ-2.2.1-and-2.3.1-release-notes
2.2.1
This is a bug fix release. It contains a fix for an issue which could lead to an infinite loop and/or out-of-memory condition on reception of a malformed message, hence rendering the application unusable. All QFJ versions below 2.2.1 and 2.3.1 are affected by this bug.
https://github.com/quickfix-j/quickfixj/wiki/QFJ-2.2.1-and-2.3.1-release-notes