4.4. What’s Fixed in 7.7.0

This section describes bugs fixed in System Designer 7.7.0. These are fixes since What’s Fixed in 7.5.0.

Connext 7.7.0 is the first production release in the 7.7 long-term support (LTS) series. It is built upon and combines all of the fixes in releases 7.4.0, 7.5.0, and 7.6.0 (see Previous Releases). See the Connext Versions and Lifecycle page for more information on RTI’s software release model.

For what’s new and fixed in other products in the Connext suite, see those products’ release notes on the RTI Community Portal or in your installation.

[Critical]: System-stopping issue, such as a crash or data loss.
[Major]: Significant issue with no easy workaround.
[Minor]: Issue that usually has a workaround.
[Trivial]: Small issue, such as a typo in a log.

4.4.1. [Major] Unable to create Routing Service input/output configurations in System Designer *

When configuring Auto Topic Route inputs and outputs for Routing Service, System Designer did not display the configuration options.

[RTI Issue ID SYSD-1304]

4.4.2. Vulnerabilities

The following vulnerabilities are fixed in this release.

See also RTI Connext Security Bulletins and Advisories for a complete list of vulnerabilities in RTI releases that have been published through the CVE® Program. That list may be more up-to-date.

4.4.2.1. [Major] Potential Denial of Service in System Designer when parsing specific HTTP requests

System Designer depended on brace-expansion 1.1.11, which is known to be affected by the CVE-2025-5889 publicly disclosed vulnerability.

This vulnerability has been fixed by upgrading brace-expansion to the latest stable version, 1.1.12.

4.4.2.1.1. User Impact without Security

This vulnerability could have resulted in the following:

Exploitable Denial of Service in System Designer when processing HTTP requests that lead to inefficient regular expression complexity.

4.4.2.1.2. User Impact with Security

Same impact as described in “User Impact without Security,” above.

[RTI Issue ID SYSD-1413]

4.4.2.2. [Major] Potential Denial of Service in System Designer when parsing malicious URLs

System Designer depended on body-parser 1.20.3 and express 4.21.2, which are known to be affected by the CVE-2025-15284 publicly disclosed vulnerability.

This vulnerability has been fixed by upgrading body-parser and express to their latest stable versions (1.20.4 for body-parser and 4.22.1 for express). See the third-party software upgrades in What’s New.

4.4.2.2.1. User Impact without Security

This vulnerability could have resulted in the following:

4.4.2.2.2. User Impact with Security

Same impact as described in “User Impact without Security” above

[RTI Issue ID SYSD-1422]



* This bug does not affect you if you are upgrading from 7.3.x or earlier.