Broadleaf Commerce 5.2.23-GA

Release Date: January 4, 2022

Overview

This is the 23rd patch release for Broadleaf Framework 5.2.x. To upgrade a 5.2.x application to the 5.2.23-GA release, it should only require updating the parent pom.xml broadleaf-boot-starter-parent to 5.2.23-GA.

New and Noteworthy

Log4j vulnerability

There is a critical security issue with Log4j2. More info available in our Log4j blog.

Library upgrades

• Springboot -> 1.5.15.RELEASE to 1.5.22.RELEASE
• log4j2 -> from 2.15.0 to 2.17.1
• logback -> from 1.1.11 to 1.2.10
• commons logging -> 1.1.3 to 1.2

An at-a-glance view of the issues that were closed in this release:

Minor Bugs(1)

• In BroadleafCurrencyImpl force the currency to be instantiated by the call getCurrencyCode() method instead of the field currencyCode

Enhancements(1)

• Library upgrades mentioned above.

Total Resolved Issues: 2