Bloomreach Experience Manager V13.4.17 Release Notes
April 12, 2022
The new maintenance release of 13.4.17 is available for general use for our customers and partners. This release includes improvements in community and enterprise artifacts.
We encourage all projects to update to the most recent regular releases. Using a tagged artifact that is not yet part of a release should only be done if there is a specific reason and only after testing in your specific project setup.
Update considerations
The following 3rd party dependencies have changed since the previous maintenance release. If your project directly uses any of these libraries, please validate compatibility. For more information on changes in these libraries please see information from the invidual vendors.
Note that brXM is not vulnerable to the exploit known as "spring4shell" due to our usage of Spring and our supported Java versions. In addition, we have updated to a verson of Spring in which this vulnerability has been fixed.
| Module | 13.4.16 | 13.4.17 |
|---|---|---|
| org.apache.jackrabbit/jackrabbit-jcr-commons | 2.21.6-h2 | 2.21.6-h3 |
| org.apache.jackrabbit/jackrabbit-spi-commons | 2.21.6-h2 | 2.21.6-h3 |
| org.apache.jackrabbit/jackrabbit-spi | 2.21.6-h2 | 2.21.6-h3 |
| org.springframework/spring-context | 5.3.15 | 5.3.18 |
| org.springframework/spring-aop | 5.3.15 | 5.3.18 |
| org.springframework/spring-beans | 5.3.15 | 5.3.18 |
| org.springframework/spring-core | 5.3.15 | 5.3.18 |
| org.springframework/spring-jcl | 5.3.15 | 5.3.18 |
| org.springframework/spring-expression | 5.3.15 | 5.3.18 |
| org.apache.jackrabbit/jackrabbit-api | 2.21.6-h2 | 2.21.6-h3 |
| org.apache.jackrabbit/jackrabbit-jcr-rmi | 2.21.6-h2 | 2.21.6-h3 |
| org.apache.jackrabbit/jackrabbit-core | 2.21.6-h2 | 2.21.6-h3 |
| org.apache.jackrabbit/jackrabbit-data | 2.21.6-h2 | 2.21.6-h3 |
| org.springframework/spring-context-support | 5.3.15 | 5.3.18 |
| org.springframework/spring-web | 5.3.15 | 5.3.18 |
| org.springframework/spring-webmvc | 5.3.15 | 5.3.18 |
| org.springframework/spring-oxm | 5.3.15 | 5.3.18 |
| org.springframework/spring-tx | 5.3.15 | 5.3.18 |
| org.springframework/spring-jdbc | 5.3.15 | 5.3.18 |
| org.apache.jackrabbit/jackrabbit-jcr-server | 2.21.6-h2 | 2.21.6-h3 |
| org.apache.jackrabbit/jackrabbit-webdav | 2.21.6-h2 | 2.21.6-h3 |
Overview of JIRA issues closed in Bloomreach Experience 13.4.17
Task
- [ CMS-15025 ] - [10 modules] Bump hippo jackrabbit version to latest release 2.21.6-h3
- [ CMS-15016 ] - [channel-manager] Update ajv version
- [ CMS-15013 ] - [cms, translations] Update copyright year on login screen
Totals for issues in this release
- Tasks 3