1. Atomic Wiki
  2. Blogs
  3. eXist Developer's Blog
  4. eXist-db 5.5.0

eXist-db 5.5.0

by adam at 2023/01/12 at 00:18:01 z
releasearticle

eXist-db 5.5.0 Release Notes

Version 5.5.0 includes critical fixes for defects found in version 5.4.0. It is recommended that all users of eXist-db 5.x.x upgrade to version 5.5.0 or newer.

Features and Improvements

  • request:get-data#0 should support Chunked Transfer Encoding by @adamretter in #4343
  • Use newer Java 8 JVM memory options for better compatibility with Docker by @adamretter in #4282
  • Improve performance of JAC Query Dialog by @adamretter in #4357
  • Improve XSLT errors by @adamretter in #4373
  • Limit the number of hardware threads to a max of 16 in some tests by @adamretter in #4370
  • Do not override Bearer Authentication with Basic Authentication by @adamretter in #4376
  • Fix issues with range, precision, and exponent with fn:xml-to-json by @adamretter in #4388
  • Improve out-of-scope detection for binary variables by @adamretter in #4410
  • Report null results instead of throwing NPE by @adamretter in #4489
  • Capture xs:anyURI error details in XMLDB Module by @adamretter in #4353
  • Improvements to system:as-user by @adamretter in #4350

Bug Fixes

  • Fix regression in util:document-id by @adamretter in #4271
  • Fix a security privilege escalation issue with XQueryTrigger by @adamretter in #4275
  • Fix XQuery Trigger chaining by @adamretter in #4283
  • Allow BigDecimal and BigInteger values to be declared via XML:DB API by @adamretter in #4419
  • Backport of encoding and file module fixes by @line-o in #4324
  • Send a valid HTTP Accept Header by @adamretter in #4299
  • Reinstate all XQuery 3 tests by @adamretter in #4310
  • Fix XML Catalogue Resolution by @adamretter in #4329
  • Fix catalog uris when using Windows Paths by @adamretter in #4339
  • Add missing entity-resolver elements to the Schema for collection.xconf by @adamretter in #4363
  • override resource type from backup metadata by @reinhapa in #4380
  • Share common code between RestoreHandler and SystemImportHandler by @adamretter in #4403
  • Fix additional issues with ResourceType and MediaType during Restore by @adamretter in #4404
  • Fix the Node Test for document-node(element(name)) by @adamretter in #4396
  • Update IntelliJ IDEA IDE config for eXist-db 5.5.0-SNAPSHOT by @adamretter in #4417
  • Fix numerous bugs in numeric operations by @adamretter in #4436
  • Fix the use of Function Reference from with a Predicate by @adamretter in #4415
  • Avoid an NPE when disposing Binary Values by @adamretter in #4463
  • Fix resource leak (and file lock) by @adamretter in #4524
  • Change URL for two unparsed-text tests by @adamretter in #4551
  • Fix issues with document-node lookups on various axis by @adamretter in #4549
  • Fixes an issue with XSuite not being able to run some formulations of XQsuite by @adamretter in #4590
  • Jetty dtd references must now use https instead of http by @StephanMa in #4619

Updated Dependencies

  • Update to Xerces 2.12.2 by @adamretter in #4307

Full Changelog: https://github.com/eXist-db/exist/compare/eXist-5.4.1...eXist-5.5.0

  1. Atomic Wiki
  2. Blogs
  3. eXist Developer's Blog
  4. eXist-db 4.11.0

eXist-db 4.11.0

by adam at 2023/01/11 at 22:56:12 z
releasearticle

eXist-db 4.11.0 Release Notes

Version 4.11.0 includes critical fixes for defects found in version 4.10.0. It is recommended that all users of eXist-db 4.x.x upgrade to version 4.11.0 or newer.

Features and Improvements

  • request:get-data#0 should support Chunked Transfer Encoding by @adamretter in #4342
  • Improve performance of JAC Query Dialog by @adamretter in #4358
  • Improve XSLT errors by @adamretter in #4374
  • Allow BigDecimal and BigInteger values to be declared via XML:DB API by @adamretter in #4420
  • Improve out-of-scope detection for binary variables by @adamretter in #4408
  • Report null results instead of throwing NPE by @adamretter in #4490
  • Fail the build if the .xar.zip file that was downloaded was invalid by @adamretter in #4465
  • Change URL for two unparsed-text tests by @adamretter in #4552
  • Prevent OutOfMemory on JDK 17 when loading EXPath Modules by @ohumbel in #4617
  • Add missing entity-resolver elements to the Schema for collection.xconf by @adamretter in #4364
  • Limit the number of hardware threads to a max of 16 in some tests by @adamretter in #4371
  • Do not override Bearer Authentication with Basic Authentication by @adamretter in #4377
  • Fix the Node Test for document-node(element(name)) by @adamretter in #4397
  • Fix numerous bugs in numeric operations by @adamretter in #4437
  • Fix the use of Function Reference from with a Predicate by @adamretter in #4416
  • Ensure that spaces in Windows paths for startup.sh and server.sh are correctly quoted by @adamretter in #4460
  • Avoid an NPE when disposing Binary Values by @adamretter in #4464
  • Import the ErrorCodes class by @mcmeeking in #4494
  • fix resource leak (and file lock) by @adamretter in #4525
  • Fix issues with document-node lookups on various axis by @adamretter in #4550
  • Jetty dtd references must now use https instead of http by @StephanMa in #4616

Bug Fixes

  • Fix regression in util:document-id by @adamretter in #4272
  • Fix a security privilege escalation issue with XQueryTrigger by @adamretter in #4276
  • Fix XQuery Trigger chaining by @adamretter in #4284
  • Send a valid HTTP Accept Header by @adamretter in #4300
  • Fix XML Catalogue Resolution by @adamretter in #4320
  • Reinstate code for a historical Jetty bugfix by @adamretter in #4344
  • Fix catalog uris when using Windows Paths by @adamretter in #4340
  • Capture xs:anyURI error details in XMLDB Module by @adamretter in #4354

Updated Dependencies

  • Update from Xerces 2.11.0 to 2.12.2 by @adamretter in #4308
  • Update Jing from version 20151127 to 20181222 by @adamretter in #4323
  • Update EXPath HTTP Client from 1.1.0 to 1.1.4 by @adamretter in #4491

New Contributors

  • @mcmeeking made their first contribution in #4494

Full Changelog: https://github.com/eXist-db/exist/compare/eXist-4.10.0...eXist-4.11.0

  1. Atomic Wiki
  2. Blogs
  3. eXist Developer's Blog
  4. eXist-db 6.0.1

eXist-db 6.0.1

by adam at 2022/02/09 at 06:29:06 z
releasearticle

eXist-db 6.0.1 Release Notes

Version 6.0.1 is a small hotfix release for version 6.0.0.

We recommend that all users of eXist-db 6.0.0 that use either WebDAV or Monex should immediately upgrade to eXist-db 6.0.1.

It incorporates just two important fixes:

  1. A regression was introduced in eXist-db 5.4.0 whereby XML documents were not correctly stored or copyable via WebDAV. This is now fixed in 6.0.1 by #4230
  2. A regression was introduced in eXist-db 5.4.0 whereby WebSocket support for Monex's Console was disabled. This is now fixed in 6.0.1 by #4215
  1. Atomic Wiki
  2. Blogs
  3. eXist Developer's Blog
  4. eXist-db 5.4.1

eXist-db 5.4.1

by adam at 2022/02/09 at 06:19:06 z
releasearticle

eXist-db 5.4.1 Release Notes

Version 5.4.1 is a small hotfix release for version 5.4.0. We recommend that all users of eXist-db 5.4.0 that use either WebDAV or Monex should immediately upgrade to eXist-db 5.4.1.

It incorporates just two important fixes.

  1. A regression was introduced in eXist-db 5.4.0 whereby XML documents were not correctly stored or copyable via WebDAV. This is now fixed in 5.4.1 by #4231
  2. A regression was introduced in eXist-db 5.4.0 whereby WebSocket support for Monex's console was disabled. This is now fixed in 5.4.1 by #4221
  1. Atomic Wiki
  2. Blogs
  3. eXist Developer's Blog
  4. eXist-db 6.0.0

eXist-db 6.0.0

by adam at 2022/01/27 at 16:29:06 z
releasearticle

eXist-db 6.0.0 Release Notes

Apart from two changes, version 6.0.0 is identical to version 5.4.0. The two changes are:

  1. It includes an update from Log4j2 version 2.15.0 to version 2.17.1. This Log4j2 update incorporates fixes for security issues CVE-2021-45105, CVE-2021-45046, and CVE-2021-44228. To fix the security issues, Log4j2 removed some log format customisation functionality. eXist-db does not rely on this customisation support in its default configuration, however, if you are using such functionality, you will need to stick with eXist-db 5.4.0 or update your Log4j2 configuration; for more details see: https://logging.apache.org/log4j/2.x/security.html#CVE-2021-44832.
  2. It includes an update to the Apache XML-RPC libraries used by eXist-db #3934. This fixes a known security issues with Apache XML-RPC (CVE-2019-17570 and CVE-2016-5002). Unfortunately, this update mandates changing how eXist-db sends the permissions of Documents and Collections over XML-RPC, as such the XML-RPC API in eXist-db 6.0.0 is not considered backwards compatible. If you make use of the XML-RPC API, you may need to use eXist-db 5.4.0 until you can update your applications. Oyxgen XML Editor is known to use the XML-RPC API as is the gulp-exist tool.

Where possible, we recommend that all users choose to deploy eXist-db 6.0.0 over eXist-db 5.4.0.