You are viewing the documentation for Blueriq 17. Documentation for other versions is available in our documentation directory.

1. Enhancements

Enhancement Details
Role Mappings for DCM Dashboard

The DCM dashboard service supports role mappings from organization roles to Blueriq roles.

See Blueriq DCM Dashboard Service for information on how to configure this.

2. Upgrade Instructions

There are no specific upgrade instructions for this release.

As a best practice

  • backup your repository
  • backup your database before running scripts
  • backup your spring.config.additional-location directory ([Blueriq installation directory]\Runtime)
  • backup any config files you have altered under [Blueriq installation directory]\Services

before you start the upgrade.

3. Artifacts

 The Blueriq artifacts are available under name: 17.11.2.478

This release includes these versions of Blueriq components with a separate life cycle:

Component

Version

Customer Data Service 5.2.1
DCM Lists Service 4.2.1
Material Theme 1.5.1
Development tools frontend 2.0.2
DCM Maintenance App 5.3.1
Audit Consumer 1.3.1
DCM Dashboard Service 2.3.1
Gateway Service 1.4.1
Document Renderer 2.4.2

4. Blueriq Libraries

There are no specific Library updates for this release.

5. Libraries

In this release, the set of third party libraries that is used by Blueriq was updated. When your installation of Blueriq includes custom components (artifacts that do not ship with Blueriq, such as proprietary plugins), those components should be tested for compatibility with these changes.

ArtifactId

GroupId

License

Version in 17.11.1

Version in 17.11.2

aspectjweaver

org.aspectj

Eclipse Public License - v 2.0

1.9.22.1

1.9.23

groovy

org.apache.groovy

Apache License 2.0

4.0.25

4.0.26

jackson-annotations

com.fasterxml.jackson.core

Apache License 2.0

2.18.2

2.18.3

jackson-core

com.fasterxml.jackson.core

Apache License 2.0

2.18.2

2.18.3

jackson-databind

com.fasterxml.jackson.core

Apache License 2.0

2.18.2

2.18.3

jackson-dataformat-xml

com.fasterxml.jackson.dataformat

Apache License 2.0

2.18.2

2.18.3

jackson-dataformat-yaml

com.fasterxml.jackson.dataformat

Apache License 2.0

2.18.2

2.18.3

jackson-datatype-jsr310

com.fasterxml.jackson.datatype

Apache License 2.0

2.18.2

2.18.3

jul-to-slf4j

org.slf4j

MIT License

2.0.16

2.0.17

logback-classic

ch.qos.logback

Eclipse Public License - v 1.0

1.5.16

1.5.18

logback-core

ch.qos.logback

Eclipse Public License - v 1.0

1.5.16

1.5.18

micrometer-commons

io.micrometer

Apache License 2.0

1.14.4

1.14.5

micrometer-core

io.micrometer

Apache License 2.0

1.14.4

1.14.5

micrometer-jakarta9

io.micrometer

Apache License 2.0

1.14.4

1.14.5

micrometer-observation

io.micrometer

Apache License 2.0

1.14.4

1.14.5

micrometer-tracing

io.micrometer

Apache License 2.0

1.4.3

1.4.4

micrometer-tracing-bridge-brave

io.micrometer

Apache License 2.0

1.4.3

1.4.4

reactor-core

io.projectreactor

Apache License 2.0

3.7.3

3.7.4

slf4j-api

org.slf4j

MIT License

2.0.16

2.0.17

spring-amqp

org.springframework.amqp

Apache License 2.0

3.2.3

3.2.4

spring-aop

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-aspects

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-beans

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-boot

org.springframework.boot

Apache License 2.0

3.4.3

3.4.4

spring-boot-actuator

org.springframework.boot

Apache License 2.0

3.4.3

3.4.4

spring-boot-actuator-autoconfigure

org.springframework.boot

Apache License 2.0

3.4.3

3.4.4

spring-boot-autoconfigure

org.springframework.boot

Apache License 2.0

3.4.3

3.4.4

spring-boot-configuration-processor

org.springframework.boot

Apache License 2.0

3.4.3

3.4.4

spring-boot-starter

org.springframework.boot

Apache License 2.0

3.4.3

3.4.4

spring-boot-starter-actuator

org.springframework.boot

Apache License 2.0

3.4.3

3.4.4

spring-boot-starter-logging

org.springframework.boot

Apache License 2.0

3.4.3

3.4.4

spring-boot-starter-validation

org.springframework.boot

Apache License 2.0

3.4.3

3.4.4

spring-context

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-context-support

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-core

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-data-commons

org.springframework.data

Apache License 2.0

3.4.3

3.4.4

spring-data-jpa

org.springframework.data

Apache License 2.0

3.4.3

3.4.4

spring-data-keyvalue

org.springframework.data

Apache License 2.0

3.4.3

3.4.4

spring-data-mongodb

org.springframework.data

Apache License 2.0

4.4.3

4.4.4

spring-data-redis

org.springframework.data

Apache License 2.0

3.4.3

3.4.4

spring-expression

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-jcl

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-jdbc

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-messaging

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-orm

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-oxm

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-rabbit

org.springframework.amqp

Apache License 2.0

3.2.3

3.2.4

spring-security-config

org.springframework.security

Apache License 2.0

6.4.3

6.4.4

spring-security-core

org.springframework.security

Apache License 2.0

6.4.3

6.4.4

spring-security-crypto

org.springframework.security

Apache License 2.0

6.4.3

6.4.4

spring-security-ldap

org.springframework.security

Apache License 2.0

6.4.3

6.4.4

spring-security-oauth2-client

org.springframework.security

Apache License 2.0

6.4.3

6.4.4

spring-security-oauth2-core

org.springframework.security

Apache License 2.0

6.4.3

6.4.4

spring-security-oauth2-jose

org.springframework.security

Apache License 2.0

6.4.3

6.4.4

spring-security-oauth2-resource-server

org.springframework.security

Apache License 2.0

6.4.3

6.4.4

spring-security-web

org.springframework.security

Apache License 2.0

6.4.3

6.4.4

spring-tx

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-web

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-webmvc

org.springframework

Apache License 2.0

6.2.3

6.2.5

spring-ws-core

org.springframework.ws

Apache License 2.0

4.0.11

4.0.12

spring-ws-security

org.springframework.ws

Apache License 2.0

4.0.11

4.0.12

spring-xml

org.springframework.ws

Apache License 2.0

4.0.11

4.0.12

6. Bug fixes

Identifier

Component

Issue

Solution

BQ-25073

 

CVE-2025-27789 was detected in the maintenance app's frontend, in @babel/runtime.

Solved by updating this dependency to a newer version.

CSD-6028

Java Runtime

A change in 17.11 to improve concurrency safety of the programmatic IPortalSession#setCurrentLanguage API could result in a deadlock when called from a service call or action handler.

The introduction of the lock has been backed out, removing the possibility for a deadlock

BQ-25071

 

CVE-2024-11831 and CVE-2025-27789 was found blueriq material theme

Fixed by upgrading libraries

BQ-25050

 

CVE-2025-22228 was detected on spring security

Resolved by updating spring security to the latest version

BQ-25034

 

CVE-2025-24813 was detected on Apache Tomcat, only for the self executing jar deliverable. The war deliverable does not contain Apache Tomcat.

CVE-2025-24813 was resolved by upgrading to the latest versions

CSD-5933

 

When an image identifier contained a dot, the image would not be included in the resulting document. This was only possible when a custom IDocumentImageProvider was added to the runtime.

This has been fixed. When the image identifier contains a dot, it will not end up in the resulting PDF file.

7. Known issues

For an overview of known issue please refer to: Known issues