Release Notes: Neo4j 3.5.35

Release Date: 11 August 2022

Neo4j 3.5.35 is a maintenance release with many important improvements and fixes. Neo4j 3.5 has reached End of Life.

Cypher

• Upgrade Apache Shiro from 1.8.0 to 1.9.1. This version includes fixes for CVE-2022-32532.

• Adds blocklist of ip addresses for cypher’s outbound http requests

Docker

• Redhat are no longer supporting or updating the openjdk docker images that we use as base images. This means there will no longer be security updates to openjdk images after July 2022.

  • https://github.com/docker-library/openjdk/issues/505

  • https://github.com/docker-library/docs/pull/2162

  Switching Docker base image to eclipse-temurin AdoptOpenJDK java built on top of debian:bullseye-slim.

• Change base image to eclipse temurin JRE not JDK. The JDK is overkill and could introduce unnecessary security issues.

Changelog and Documentation

3.5 Changelog.
3.5 Operations manual.