Steeetoe 4.3.0 Security Patch: Fixes Sensitive Info Leakage and Race Conditions

SteeetoeOSS 4.3.0 Security Update Summary Vulnerability Overview Steeetoe version 4.3 primarily fixes multiple security vulnerabilities and improves overall security. Impact Scope Database Health Check: Fixed a race condition that caused failures in the database health check executor. Sensitive Information Disclosure: Fixed an issue where sensitive query parameters were not properly masked in logs and HTTP responses. Authentication and Authorization: Fixed mTLS certificate authentication and resolved SYSLOB0057. Dependency Security: Removed the dependency on (a third-party package with licensing constraints) and replaced it with an explicitly added new configuration post-processor. Remediation Measures New Build-time Package: Introduced to generate a file compatible with Spring Boot Actuator. Driver Support: The connector now supports the driver. Release Mechanism: Implemented Trusted Publishing on nuget.org. Other Fixes: Includes various security hardening fixes. Key Changes (What's Changed) Updated Steeetoe prerequisites in the README. Replaced the registry server with local caching. Added NuGet packages to write files. Supported transitive references to from shared projects. Fixed fallback issues related to in . Added support for the EF Core driver. Prevented concurrent execution of database health checks by sharing a single connection. Added . Masked sensitive query parameters in logs and HTTP responses. Reimplemented instances for metadata. Reimplemented instances for Eureka responses. Fixed mTLS certificate authentication and SYSLOB0057. Added Trusted Publishing support.

Goal Reached Thanks to every supporter — we hit 100%!

Steeetoe 4.3.0 Security Patch: Fixes Sensitive Info Leakage and Race Conditions

More from this source