You are viewing the documentation for Blueriq 13. Documentation for other versions is available in our documentation directory.

1. Documentation

Documentation on the new features and improvements of this release is linked in the respective topics.

2. Upgrade Instructions

The upgrade instructions for this release can be found here.

As a best practice

  • backup your repository
  • backup your database before running scripts
  • backup your spring.config.additional-location directory ([Blueriq installation directory]\Runtime)
  • backup any config files you have altered under [Blueriq installation directory]\Services

before you start the upgrade.

3. Artifacts

 The Blueriq artifacts are available under name: 13.13.53.6506

This release includes these versions of Blueriq components with a separate life cycle:

Component

Version

Customer Data Service3.4.25
DCM Lists Service1.4.18
Material Theme1.0.55
Development tools frontend1.2.3

4. Aquima Libraries

There are no specific Library updates for this release.

5. Libraries

ArtifactId

GroupId

License

Version in 13.13.52

Version in 13.13.53

amqp-client

com.rabbitmq

Apache License 2.0

5.9.0

5.18.0

logback-classic

ch.qos.logback

Eclipse Public License - v 1.0

1.2.9

1.2.13

logback-core

ch.qos.logback

Eclipse Public License - v 1.0

1.2.9

1.2.13

6. Retirement announcement

There are no specific retirement announcements.

For a full list of deprecated features, go to Deprecated features.

7. Bug fixes

Identifier

Component

Issue

Solution

BQ-21733

 

CVE-2023-6378 has been detected on the logback-core dependency.

Updated logback-core to the latest version.

BQ-21671

 

CVE-2023-34055 has been reported on Spring Boot. Also, CVE-2023-34053 has been reported on Spring Boot 3.x, which is used by R16.

For R15 & R16, Spring Boot has been upgraded to the latest version. For lower versions, there is no fix available since the underlying Spring Boot version is no longer supported. Upgrade to a newer Blueriq version. In the meantime, have a look at the temporary workaround described in [

https://spring.io/security/cve-2023-34055

].

8. Known issues

For an overview of known issue please refer to: Known issue


  • No labels