You are viewing the documentation for Blueriq 14. Documentation for other versions is available in our documentation directory.

Due to a known issue in the process engine, we advise to not use releases 14.5 and 14.5.1 in a production environment when using the process engine. Please use the patched version 14.5.2 instead.

1. Bug fixes

Identifier

Component

Issue

Solution

CSD-3900

JAVA Runtime

Validations added to a header, fragment or argument of a REST message were ignored.

When a REST message has no body, the validation of headers was skipped. It is now checked that if the message has no body, headers, fragments and arguments are still validated.

CSD-3890

JAVA Runtime

The file upload container allowed file type validation was case sensitive in material theme.

Updated the validation algorithm to case insensitive.

BQ-14071

JAVA Runtime, Customer Data Service

CVE-2021-22096 is reported on spring-framework 5.3.0-5.3.10, 5.2.0-5.2.17 and older versions, which aren't supported anymore.Updated spring-boot from 2.5.5 to 2.5.6.

2. Upgrade Instructions

There are no specific upgrade instructions for this release.

As a best practice

  • backup your repository
  • backup your database before running scripts
  • backup your spring.config.additional-location directory ([Blueriq installation directory]\Runtime)
  • backup any config files you have altered under [Blueriq installation directory]\Services

before you start the upgrade.

3. Artifacts

 The Blueriq artifacts are available under name: 14.5.1.4040

This release includes these versions of Blueriq components with a separate life cycle:

Component

Version

Customer Data Service3.4.1
DCM Lists Service1.4.1
Material Theme1.0.40

4. Aquima Libraries

There are no changes to the Aquima Libraries for this release.

5. Known issues

For an overview of known issue please refer to: Known issues

6. Libraries

In this release, the set of third party libraries that is used by Blueriq was updated. When your installation of Blueriq includes custom components (artifacts that do not ship with Blueriq, such as proprietary plugins), those components should be tested for compatibility with these changes.

ArtifactId

GroupId

License

Version in 14.5

Version in 14.5.1

netty-incubator-codec-quic

io.netty.incubator

Apache License 2.0

-

0.0.18.Final

reactor-netty-incubator-quic

io.projectreactor.netty.incubator

Apache License 2.0

-

0.0.1

ehcache

org.ehcache

Apache License 2.0

3.9.6

3.9.7

metrics-core

io.dropwizard.metrics

Apache License 2.0

4.1.25

4.1.26

micrometer-core

io.micrometer

Apache License 2.0

1.7.4

1.7.5

netty-buffer

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-codec

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-codec-dns

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-codec-http

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-codec-http2

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-codec-socks

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-common

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-handler

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-handler-proxy

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-resolver

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-resolver-dns

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-resolver-dns-native-macos

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-transport

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-transport-native-epoll

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

netty-transport-native-unix-common

io.netty

Apache License 2.0

4.1.68.Final

4.1.69.Final

reactor-core

io.projectreactor

Apache License 2.0

3.4.10

3.4.11

reactor-netty

io.projectreactor.netty

Apache License 2.0

1.0.11

1.0.12

reactor-netty-core

io.projectreactor.netty

Apache License 2.0

1.0.11

1.0.12

reactor-netty-http

io.projectreactor.netty

Apache License 2.0

1.0.11

1.0.12

reactor-netty-http-brave

io.projectreactor.netty

Apache License 2.0

1.0.11

1.0.12

spring-amqp

org.springframework.amqp

Apache License 2.0

2.3.10

2.3.11

spring-aop

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-beans

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-boot

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-actuator

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-actuator-autoconfigure

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-autoconfigure

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-configuration-processor

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-aop

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-data-mongodb

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-logging

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-validation

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-context

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-context-support

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-core

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-data-commons

org.springframework.data

Apache License 2.0

2.5.5

2.5.6

spring-data-keyvalue

org.springframework.data

Apache License 2.0

2.5.5

2.5.6

spring-data-mongodb

org.springframework.data

Apache License 2.0

3.2.5

3.2.6

spring-data-redis

org.springframework.data

Apache License 2.0

2.5.5

2.5.6

spring-expression

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-hateoas

org.springframework.hateoas

Apache License 2.0

1.3.4

1.3.5

spring-jcl

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-jdbc

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-messaging

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-orm

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-oxm

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-rabbit

org.springframework.amqp

Apache License 2.0

2.3.10

2.3.11

spring-security-config

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-core

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-crypto

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-ldap

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-oauth2-client

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-oauth2-core

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-web

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-session-core

org.springframework.session

Apache License 2.0

2.5.2

2.5.3

spring-session-data-redis

org.springframework.session

Apache License 2.0

2.5.2

2.5.3

spring-tx

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-web

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-webflux

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-webmvc

org.springframework

Apache License 2.0

5.3.10

5.3.12

ArtifactId

GroupId

License

Version in 3.4.0

Version in 3.4.1

spring-amqp

org.springframework.amqp

Apache License 2.0

2.3.10

2.3.11

spring-aop

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-beans

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-boot

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-autoconfigure

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-aop

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-json

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-logging

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-security

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-web

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-context

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-core

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-data-commons

org.springframework.data

Apache License 2.0

2.5.5

2.5.6

spring-expression

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-jcl

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-jdbc

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-messaging

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-orm

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-rabbit

org.springframework.amqp

Apache License 2.0

2.3.10

2.3.11

spring-security-config

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-core

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-crypto

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-web

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-tx

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-web

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-webmvc

org.springframework

Apache License 2.0

5.3.10

5.3.12

ArtifactId

GroupId

License

Version in 1.4.0

Version in 1.4.1

spring-amqp

org.springframework.amqp

Apache License 2.0

2.3.10

2.3.11

spring-aop

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-beans

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-boot

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-autoconfigure

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-aop

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-logging

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-boot-starter-security

org.springframework.boot

Apache License 2.0

2.5.5

2.5.6

spring-context

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-core

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-data-commons

org.springframework.data

Apache License 2.0

2.5.5

2.5.6

spring-data-mongodb

org.springframework.data

Apache License 2.0

3.2.5

3.2.6

spring-expression

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-jcl

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-messaging

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-rabbit

org.springframework.amqp

Apache License 2.0

2.3.10

2.3.11

spring-security-config

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-core

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-crypto

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-security-web

org.springframework.security

Apache License 2.0

5.5.2

5.5.3

spring-tx

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-web

org.springframework

Apache License 2.0

5.3.10

5.3.12

spring-webmvc

org.springframework

Apache License 2.0

5.3.10

5.3.12

  • No labels