B-15981

Make the timeout for email notification output configurable.

New uc.properties configuration property to allow the subscription to task output retrieval from a notification email to be configured.

uc.action.email_notification.attach_output.subscription.timeout_in_seconds.

Default value is 180.

B-15965

SAP Task: Modify -event_select_state configuration option to use short form "N", "C", and "A".

A change in UA (Universal Agent) version 7.1 introduced more stringent syntax checks resulting in SAP Tasks failing with an error message indicating that the parameter value exceeds a size limit.

B-15969

Upgrade SmartGWT library dependencies (2022-06-16).

Information leakage vulnerability in SmartClient and SmartGWT server products with certain configurations.  The vulnerability is present if you have the FileDownload servlet mapped in the web.xml file.  

We regard this vulnerability as potentially high severity because, although the exploit is non-obvious and requires knowledge of SmartClient/SmartGWT server internals, it gives read-only access to all files deployed as part of your web application.

This vulnerability does not inherently allow an attacker to take over your SmartClient-based application, stop it from functioning, or give access to the server on which it is running.