You are viewing the documentation for Blueriq 16. Documentation for other versions is available in our documentation directory.
1. Documentation
Documentation on the new features and improvements of this release is linked in the respective topics.
2. Upgrade Instructions
See Release 16.1 Upgrade Instructions for the upgrade instructions for this release.
As a best practice
- backup your repository
- backup your database before running scripts
- backup your
spring.config.additional-locationdirectory ([Blueriq installation directory]\Runtime) - backup any config files you have altered under [Blueriq installation directory]\Services
before you start the upgrade.
3. Artifacts
The Blueriq artifacts are available under name: 16.2.1.1530
This release includes these versions of Blueriq components with a separate life cycle:
|
Component |
Version |
|---|---|
| Customer Data Service | 4.2.2 |
| DCM Lists Service | 3.0.4 |
| Material Theme | 1.1.12 |
| Development tools frontend | 1.5.6 |
| DCM Maintenance App | 3.0.2 |
| Audit Consumer | 0.2.3 |
| DCM Dashboard Service | 0.2.3 |
| Gateway Service | 0.1. |
| Document Renderer | 1.1.2 |
4. Libraries
In this release, the set of third party libraries that is used by Blueriq was updated. When your installation of Blueriq includes custom components (artifacts that do not ship with Blueriq, such as proprietary plugins), those components should be tested for compatibility with these changes.
|
ArtifactId |
GroupId |
License |
Version in 16.2 |
Version in 16.2.1 |
|---|---|---|---|---|
|
org.bouncycastle |
1.70 |
|
||
|
org.bouncycastle |
1.70 |
|
||
|
org.bouncycastle |
1.70 |
|
||
|
org.bouncycastle |
|
1.76 |
||
|
org.bouncycastle |
|
1.76 |
||
|
org.bouncycastle |
|
1.76 |
||
|
com.rabbitmq |
5.16.0 |
5.16.1 |
||
|
org.eclipse.angus |
2.0.0 |
2.0.1 |
||
|
org.codehaus.janino |
3.1.9 |
3.1.10 |
||
|
io.micrometer |
1.0.2 |
1.0.4 |
||
|
org.hibernate.validator |
8.0.0.Final |
8.0.1.Final |
||
|
com.sun.istack |
4.1.1 |
4.1.2 |
||
|
org.codehaus.janino |
3.1.9 |
3.1.10 |
||
|
org.glassfish.jaxb |
4.0.2 |
4.0.3 |
||
|
org.glassfish.jaxb |
4.0.2 |
4.0.3 |
||
|
org.jboss.logging |
3.5.0.Final |
3.5.3.Final |
||
|
io.lettuce |
6.2.4.RELEASE |
6.2.5.RELEASE |
||
|
org.apache.logging.log4j |
2.19.0 |
2.20.0 |
||
|
ch.qos.logback |
1.4.7 |
1.4.8 |
||
|
ch.qos.logback |
1.4.7 |
1.4.8 |
||
|
io.micrometer |
1.10.7 |
1.10.9 |
||
|
io.micrometer |
1.10.7 |
1.10.9 |
||
|
io.micrometer |
1.10.7 |
1.10.9 |
||
|
io.micrometer |
1.0.6 |
1.0.8 |
||
|
io.micrometer |
1.0.6 |
1.0.8 |
||
|
io.netty.incubator |
0.0.40.Final |
0.0.48.Final |
||
|
io.netty.incubator |
0.0.40.Final |
0.0.48.Final |
||
|
com.nimbusds |
9.43.1 |
9.43.3 |
||
|
io.projectreactor |
3.5.6 |
3.5.8 |
||
|
io.projectreactor.netty |
1.1.7 |
1.1.9 |
||
|
io.projectreactor.netty |
1.1.7 |
1.1.9 |
||
|
io.projectreactor.netty |
1.1.7 |
1.1.9 |
||
|
io.projectreactor.netty.incubator |
0.1.7 |
0.1.9 |
||
|
org.springframework.amqp |
3.0.4 |
3.0.6 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework.boot |
3.0.7 |
3.0.9 |
||
|
org.springframework.boot |
3.0.7 |
3.0.9 |
||
|
org.springframework.boot |
3.0.7 |
3.0.9 |
||
|
org.springframework.boot |
3.0.7 |
3.0.9 |
||
|
org.springframework.boot |
3.0.7 |
3.0.9 |
||
|
org.springframework.boot |
3.0.7 |
3.0.9 |
||
|
org.springframework.boot |
3.0.7 |
3.0.9 |
||
|
org.springframework.boot |
3.0.7 |
3.0.9 |
||
|
org.springframework.boot |
3.0.7 |
3.0.9 |
||
|
org.springframework.cloud |
4.0.2 |
4.0.4 |
||
|
org.springframework.cloud |
4.0.2 |
4.0.4 |
||
|
org.springframework.cloud |
4.0.2 |
4.0.4 |
||
|
org.springframework.cloud |
4.0.2 |
4.0.4 |
||
|
org.springframework.cloud |
4.0.2 |
4.0.4 |
||
|
org.springframework.cloud |
4.0.2 |
4.0.4 |
||
|
org.springframework.cloud |
4.0.2 |
4.0.4 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework.data |
3.0.6 |
3.0.8 |
||
|
org.springframework.data |
3.0.6 |
3.0.8 |
||
|
org.springframework.data |
3.0.6 |
3.0.8 |
||
|
org.springframework.data |
4.0.6 |
4.0.8 |
||
|
org.springframework.data |
3.0.6 |
3.0.8 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework.hateoas |
2.0.4 |
2.0.6 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework.ldap |
3.0.3 |
3.0.4 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework.amqp |
3.0.4 |
3.0.6 |
||
|
org.springframework.retry |
2.0.1 |
2.0.2 |
||
|
org.springframework.security |
6.0.3 |
6.0.5 |
||
|
org.springframework.security |
6.0.3 |
6.0.5 |
||
|
org.springframework.security |
6.0.3 |
6.0.5 |
||
|
org.springframework.security |
6.0.3 |
6.0.5 |
||
|
org.springframework.security |
6.0.3 |
6.0.5 |
||
|
org.springframework.security |
6.0.3 |
6.0.5 |
||
|
org.springframework.security |
6.0.3 |
6.0.5 |
||
|
org.springframework.security |
6.0.3 |
6.0.5 |
||
|
org.springframework.security |
1.0.11.RELEASE |
1.0.12.RELEASE |
||
|
org.springframework.security |
6.0.3 |
6.0.5 |
||
|
org.springframework.session |
3.0.1 |
3.0.2 |
||
|
org.springframework.session |
3.0.1 |
3.0.2 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework |
6.0.9 |
6.0.11 |
||
|
org.springframework.ws |
4.0.4 |
4.0.5 |
||
|
org.springframework.ws |
4.0.4 |
4.0.5 |
||
|
org.springframework.ws |
4.0.4 |
4.0.5 |
||
|
org.glassfish.jaxb |
4.0.2 |
4.0.3 |
5. Retirement announcement
There are no specific retirement announcements.
For a full list of deprecated features, go to Deprecated features.
6. Bug fixes
|
Identifier |
Component |
Issue |
Solution |
|---|---|---|---|
|
BQ-20797 |
Tomcat |
The Tomcat server that was bundled with the Blueriq installer was vulnerable to CVE-2023-28709. |
Tomcat has been updated to address the vulnerability. |
|
BQ-20769 |
Runtime |
CVE-2023-20862 was detected for Spring security |
Fixed upgrading to the latest spring boot version |
|
BQ-20768 |
Runtime |
CVE-20873 was detected for spring boot |
Fixed by upgrading spring boot to the latest versions |
|
BQ-20752 |
Gateway |
CVE-2023-34035 was detected for Spring Security |
upgraded spring security libraries to 6.0.5 |
|
BQ-20749 |
Studio |
Various CVEs (CVE-2020-1045, CVE-2022-29117, CVE-2017-11770) were reported for the Studio backend, but none were applicable to the .NET version used by Blueriq |
Suppressed the specific CVEs |
|
BQ-20747 |
Audit Consumer, Customer Data Service, DCM Dashboard, DCM Lists Service, Gateway, Runtime, Maintenance App |
CVE-2023-33201 detected for bouncy-castle lower than 1.73 |
upgraded to version 1.76 |
|
CSD-4853 |
Audit Consumer, Customer Data Service, DCM Lists Service, Runtime, Maintenance App |
CVE-2023-34034 was detected for spring security |
Blueriq is not affected by CVE-2023-34034 since we do not use '**' matchers and certainly not with Spring WebFlux. Nevertheless we have upgrade the spring dependencies to version that are no longer affected by this CVE. |
|
BQ-20679 |
Encore |
After removing the root node in a content item, the buttons for adding an inline text item node or an image nod did not add the node. |
The buttons correctly add the root node when clicked. |
|
CSD-4810 |
Encore |
Complex aggregates were prone to infinite cycles, crashing the application |
Introduced better checks for infinite cycles, preventing crashes |
|
BQ-20565 |
Case engine |
When a non-existent case is tried to read, the service does not end in the "caseNotFound" exit of the service call. Instead, it logs: "Could not load aggregate into profile because the aggregate does not exists in the case" and continues the default exit node |
Case Engine returns proper error code and HTTP status |
7. Known issues
For an overview of known issue please refer to: Known issues
Overview
Content Tools