QuickFIX J 2.3.2 release notes

General

You need at least Java 8 to run QuickFIX/J.

This is a bug fix release. It contains only few bug fixes and upgrades the MINA library to 2.2.4 since prior versions are vulnerable to RCE: https://www.cve.org/CVERecord?id=CVE-2024-52046 . However, QFJ is not directly affected by this since it does not use the affected ObjectSerializationCodecFactory.

Contributors

https://github.com/david-gibbs-ig
https://github.com/the-thing

included pull requests / issues

https://github.com/quickfix-j/quickfixj/milestone/14?closed=1