Jahia 7.3.10 Release Notes
November 14, 2023
Jahia 7.3.10 is the last planned maintenance release for Jahia 7.3, as it is entering limited maintenance.
What's new?
- Several third-party libraries have been upgraded to benefit from their latest security fixes. See the changelog below for the details.
Upgrading from a previous version?
Spring bean modifications
As there has been no changes in our Spring beans, you do not have nothing specific to do if you have customized your application context in the file digital-factory-config/jahia/applicationcontext-custom.xml.
Updated modules and libraries
Library upgrades
The following libraries were updated between Jahia 7.3.9.0 and Jahia 7.3.10.0.
| Library | Version in Jahia 7.3.9.0 | Version in Jahia 7.3.10.0 |
|---|---|---|
| Apache Shiro | 1.7.1 | 1.8.0 |
| Apache Tomcat | 9.0.45 | 9.0.55 |
| Google Protobuf Java | 3.15.3 | 3.16.1 |
| Jasig CAS Client for Java | 3.2.1 | 3.6.4 |
Updated modules
The following modules were updated between Jahia 7.3.9.0 and Jahia 7.3.10.0.
| Module | Version in Jahia 7.3.9.0 | Version in Jahia 7.3.10.0 |
|---|---|---|
| CKEditor | 4.7.1-jahia4 | 4.17.1-jahia1 |
| Default | 7.9.0 | 7.10.0 |
| External Provider | 3.5.0 | 3.6.0 |
| Graphql Provider | 1.10.0 | 1.11.0 |
| Jahia CSRF Guard | 1.4.0 | 1.5.0 |
| Macros | 7.1.2 | 7.1.3 |
| News | 2.0.4 | 2.0.5 |
| User Dashboard | 7.2.0 | 7.3.0 |
Jahia 7.3.10.0 - Changelog
Security
For more detail about the minor library upgrades, see the Updated modules and libraries section above.
- Upgraded Apache Shiro to 1.8.0
- Upgraded protobuf-java to 3.16.1
- Upgraded cas-client-core from 3.2.1 to 3.6.4
Core
- Remove duplicate static resources in the
<head>tag if they also exist in<body> - Fixed issue while browsing a website in live in its default language when urlRewriteRemoveCmsPrefix = false
- Fixed export issue when fieldnames begin with a numeric character
- Removed mandatory language check for publication when node is marked for deletion
- Removed publication info when copying/pasting a node
- Fixed issue with the maintenanceMode Jahia property not taken into account
- Removed useless warning log "This node doesn't exist in this language" when a page is not published
- Fixed issue when using date facets in external data provider
- Fixed undeletion issue with internationalized contents
- Fixed issue with dynamic initializer not available until the module is started
- Removed the "Paste as reference" button when the copied content cannot be pasted in the list
Import/Export
- Fixed export issue caused by broken references to EDP nodes
- Fixed import site stuck because of a SVG file
- Fixed cross site references issue during import
OAuth
- Fixed an exception with OAuth and Spring Webflow
Server/Site Administration
- Flushing all caches now also empties the generated-resources folder
- Removed mail-1.4.7.jar (as javax.mail-1.6.1.jar is already deployed)
Workflows
- Fixed a 404 error when opening a preview from the workflow dashboard
Installer
- Upgraded packaged Tomcat to 9.0.55
Modules - Changelog
CKEditor (4.17.1-jahia1)
- Upgraded CKEditor to 4.17.1
CSRF guard (1.5.0)
- Changed module-type of jahia-csrf-guard to "system"
- Removed csrf token from error.html pages
- Added possibility to set CSRFGuard properties
External data provider (3.6.0)
- Added a refresh of external sessions on embedded extensionSessions
- Fixed potential memory leak with JCR sessions
GraphQL (1.11.0 - depending on 7.3.10)
- Added the ability to publish all nodes down the tree via a GraphQL mutation
Macros (7.1.3)
- Fixed macros regex to prevent backtracking
News (2.0.5)
- Fixed locale format for pubDate in RSS template
User Dashboard (7.3.0)
- Added logic to display home page for preview link for users without edit access