Jahia 8.1.7 Release Notes
July 16, 2025
What's new?
Jahia 8.1.7 is a maintenance release primarily addressing security-related issues.
This release includes a fix related to rewrite rules that were affected by a previous change (in jahia-page-composer 1.8.0 / Jahia 8.1.3.0), to only affect the rules related to Jahia edit mode.
Updated modules and libraries in 8.1.7
Library upgrades
The following librairies were updated between Jahia 8.1.6.1 and Jahia 8.1.7.1
| Library | Jahia 8.1.6.1 | Jahia 8.1.7.1 | Jahia 8.1.7.3 |
|---|---|---|---|
| Apache Shiro | 1.12.0 | 1.13.0 | |
| Apache Tomcat | 9.0.75 | 9.0.83 | 9.0.104 |
| Jahia configuration plugin | 6.7 | 6.8 | |
| JSON Java | 20070829 | 20070829-jahia2 | |
| spring-web | 3.2.18.RELEASE_OSGI | 3.2.18.jahia5_OSGI | |
| spring-beans | 3.2.18.jahia1_OSGI | 3.2.18.jahia2_OSGI | |
| pax-web-jsp | 7.3.7 | 7.3.7-jahia3 |
Updated modules
The following modules were updated between Jahia 8.1.6.1 and Jahia 8.1.7.1
| Module | Jahia 8.1.6.1 | Jahia 8.1.7.1+ |
|---|---|---|
| App Shell | 2.8.1 | 2.9.0 |
| GraphQL Core Provider | 2.19.0 | 2.19.1 |
| Jahia Page Composer | 1.10.0 | 1.11.0 |
| jContent | 2.11.0 | 2.13.0 |
| Personal API Tokens | 1.4.0 | 1.4.1 |
| Site Settings SEO | 4.2.0 | 4.4.0 |
Updated bundles
The following modules were updated between Jahia 8.1.7.2 and Jahia 8.1.7.3
| Bundle | Jahia 8.1.7.2 | Jahia 8.1.7.3 |
|---|---|---|
| Clustering | 8.1.0.9 | 8.1.3 |
Jahia 8.1.7.2 >> 8.1.7.3 - Changelog
- Updated the default version of Tomcat used for new installation (please read this note about facade recycling, which applies to all versions of Jahia running Tomcat 9.0.90+)
- Updated libraries (spring-web, spring-beans, pax-web-jsp), see section above for versions.
- Updated clustering bundle from 8.1.0.9 to 8.1.3
Jahia 8.1.7.1 >> 8.1.7.2 - Changelog
- Fixed a compatibility issue between Jahia page composer and Chrome 128+ when accessing content via links
Jahia 8.1.6.1 >> 8.1.7.1 - Changelog
Core
- Fixed an issue in JSON parsing allowing to progressively increase memory usage (see Security Patch - December, 2023)
- Added a permission check for the export feature
- Hide authorization header in ErrorLoggingFilter logs
- Fixed errors when replicating a configuration accross a cluster
- Fixed errors when using unpublish all due to duplicated content id across languages
- Improved checks of authorized redirects
- Upgraded Shiro from 1.12.0 to 1.13.0
- Upgraded the Tomcat version provided by the installer from 9.0.75 to 9.0.83
Modules included in the upgrade - Changelog
App Shell (2.9.0)
- Fixed blank page issue when accessing administration pages due to wrong site and language resolution
- Fixed random blank page in administration pages due to the module not initializing correctly
GraphQL Core Provider (2.19.1)
- Added a new entry point to get url of external provider nodes
Jahia Page Composer (1.11.0)
- Fixed issue with query parameters not preserved upon redirection by adding rewrite rules
jContent (2.13.0)
- Fixed a blank screen issue when navigating to an empty folder
- Fixed an issue when switching views caused by the paste action that was missing the language
Also introduced in version 2.12.0:
- Fixed an issue in the picker returning to start of the list when opening a folder
Personal API Tokens (1.4.1)
- Extended graphql-annotations compability range
- Upgraded Jahia configuration plugin version
- Removed the duplicated "resolutions" entry in package.json
Site Settings SEO (4.4.0)
- Fixed incorrect webpack configuration that could result in a crash of Jahia Administration UI when modules other than site-settings-seo
- Fixed error in the browser's console when moving vanity URLs