Skip to content

Conversation

@LucasLazogue
Copy link

@LucasLazogue LucasLazogue commented Nov 17, 2025

Issue: 107158

Move the implementation of the GXflow FullText Search External Object into GxClasses.
As previously done for GAM, these binaries will no longer be included in the GeneXus installation and will instead be provided through packages.

CVE-2024-25710
CVE-2024-26308
CVE-2025-31672

#GXSEC

@genexusbot
Copy link
Collaborator

Cherry pick to beta failed, 1 conflicted file in commit caad503
  • pom.xml

@genexusbot
Copy link
Collaborator

Manual cherry pick to beta success

Copy link
Contributor

@sgrampone sgrampone left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

From what I've seen you are not using directly the fontbox, it's also a transitive dependency of the pdfbox. You can take it off the direct reference to fontbox, it will bring it automatically. Idem for commons-logging.
Also, pdfbox is used on gxlassR pom, you should add a variable to pom (parent) and use that variable on both poms. Idem for commons-collections4 and lucene-core, last one is used on gxsearch
commons-compress is dependency of poi-ooxml and you are not using it directly, you can remove it from pom
Could you check if you need poi-ooxml-schemas? I remove it and it compiled, it seems it's not needed.

@genexusbot
Copy link
Collaborator

Cherry pick to beta success

sgrampone
sgrampone previously approved these changes Nov 18, 2025
@genexusbot
Copy link
Collaborator

Cherry pick to beta success

@genexusbot
Copy link
Collaborator

Revert to beta success
  • 28d56d2 (warning: no changes merged)
  • 7923415 (warning: no changes merged)
  • caad503 (warning: no changes merged)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants