- Revenera Community
- :
- FlexNet Publisher
- :
- FlexNet Publisher Forum
- :
- Re: Which gsoap Version is used in FNP 11.17.2 ?
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Subscribe
- Mute
- Printer Friendly Page
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
Which exact version of gsoap is used in the FNPCommsSoap included in the FlexNet Publisher 11.17.2.0 Toolkit ?
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
@jschier , the gsoap version in use will be v2.8.69 but there are future plans to upgrade it to at least v2.8.106 (based on available informations at present) in near future.
Unfortunately there is no fixed date for particular enhancement, but i would guess it to be done in next year releases of FNP.
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
@jschier , the gsoap version in use will be v2.8.69 but there are future plans to upgrade it to at least v2.8.106 (based on available informations at present) in near future.
Unfortunately there is no fixed date for particular enhancement, but i would guess it to be done in next year releases of FNP.
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
I'm glad to read your consideration for updating gsoap and hope that this enhancement will come soon. Because the current used version has the vulnerability CVE-2019-7659 rated with an CVSS 3.0 scoring of 8.1 which is HIGH.
- Mark as New
- Subscribe
- Mute
- Permalink
- Report Inappropriate Content
@jschier , Engineering has confirmed that in accordance to "CVE-2019-7659" - The vulnerability will be introduced if gsoap is build with WITH_COOKIES flag enabled. In FNP, gsoap is built without WITH_COOKIES. Hence, mentioned vulnerability will not impact FnpCommsSoap.dll or FNP.
Irrespective of that an upgrade of gsoap is on the FNP roadmap items.