canton v0.27.1
Release of Canton 0.27.1
Canton 0.27.1 has been released on December 15, 2021. You can download the Community edition from our github release section. The Enterprise edition is available on Artifactory.
Please also consult the full documentation of this release.
Summary
This release updates the log4j dependencies used by the Fabric SDK to 2.16.
Only Canton Enterprise is affected by this, in particular the Fabric sequencer
application. Canton itself does not use log4j but the successor logback. As
the logback version we've been using also had a few CVEs, we've used the
opportunity to upgrade to the most recent version 1.2.8.
Security and Bugfixes
- Forced Fabric SDK log4j dependency from 2.13.3 to 2.16
- Upgraded logback version from 1.2.3 to 1.2.8
Compatibility
| Dependency | Version |
|---|---|
| Java Runtime | OpenJDK 64-Bit Server VM 18.9 (build 11.0.12+7, mixed mode, sharing) |
| Daml SDK | 1.16.0 |
| Postgres | postgres (PostgreSQL) 11.13 (Debian 11.13-1.pgdg90+1) |
| CCF | 0.14.2 |
| Ethereum | besu/v20.10.4/linux-x86_64/oracle_openjdk-java-11 |
| Fabric | 2.2.2 |
What's Coming
We are currently working on Canton 1.0. Because of that, we've skipped a few
release cycles. However, if you want to be on the latest and greatest, you can
download the latest release candidate here: