Harmony eDelivery Access v1.3.1 Release Notes

Owned by Petteri Kivimäki
Nov 16, 2022

Release Info


Version number1.3.1
Release date16.11.2022
Supported versions

Access Point

  • 1.3.1
  • 1.2.0
  • 1.1.0

SMP

  • 1.3.1
  • 1.2.0
  • 1.1.0
Supported platforms

Access Point

  • Ubuntu 20.04 LTS

SMP

  • Ubuntu 20.04 LTS
Official documentationhttps://github.com/nordic-institute/harmony-common
Source code

https://github.com/nordic-institute/harmony-access-point

https://github.com/nordic-institute/harmony-smp

Software licenseEUPL 1.2
On this page:

Changes in This Release

Summary

  • Update the "com.opencsv:opencsv" 3rd party dependency to fix the Apache Commons Text (CVE-2022-42889) vulnerability.


This warning applies to all the Harmony Access Point installations that use a remote database server. The instructions for setting up a remote database with the Harmony Access Point are available here.

The local database server must be started before the Harmony Access Point version upgrade. If the local database server is not running during the version upgrade, the installer fails and some configuration files are lost. After the version upgrade, the local database server can be stopped.

It's strongly advised to take a full backup of the Harmony Access Point host before running the version upgrade.

Completed Issues

Issue IDTypeSummary
NEDS-98Fix

Update the "com.opencsv:opencsv" 3rd party dependency to fix the Apache Commons Text (CVE-2022-42889) vulnerability.

Issue types: fix (bug fix or technical debt), improvement (improvement to an existing feature), new (a new feature).

New/Updated Dependencies

DependencyOld VersionNew VersionNotes

com.opencsv:opencsv

5.05.7.1New version includes a fix to CVE-2022-42889.

Contributors

The following developers have contributed to the development of this release version. A contribution means at least one Git commit that is included in the release.

GitHub Username
petkivim

Other Notes

-

Package Repositories

RepositoryURL
Focal
deb https://artifactory.niis.org/artifactory/harmony-release-deb focal-current main

Repository Sign Key Details

Download URLhttps://artifactory.niis.org/api/gpg/key/public
Hash935CC5E7FA5397B171749F80D6E3973B
FingerprintA01B FE41 B9D8 EAF4 872F A3F1 FB0D 532C 10F6 EC5B
3rd party key serverUbuntu key server

Packages

Focal

PackageSHA256 checksum
harmony-ap_1.3.1-0.ubuntu20.04_all.debb803459e7d15e773bebe4ee25bde112c2775281c3e17a047bcbbdbd2979e5f59
harmony-smp_1.3.1-0.ubuntu20.04_all.deb54d5de67e3592c96ab5e93ed8e305d207d49889e81c52b5f34c84516b3b488d6