Menu ▾ ▴

NewFeatures290

Ulf Dittmer

New and changed features in JForum 2.9.0

Information about upgrading from JForum version 2.8.3 to 2.9.0 can be found at Upgrading to JForum 2.9.0

New Features and fixes

  • Breaking change: JForum 2.9.0 requires a Servlet 6.0-compatible container like Tomcat 10.1 running on Java 11. The previous baseline of Tomcat 9 and Java 8 will no longer work.
  • During password recovery, JForum no longer says whether the account exists or not; this is in line with current security practices.
  • Fixed some potential XSS vulnerabilities (which would have been hard to exploit in practice)
  • Languages that haven't been updated for many years, and are now missing many translations, have been deactivated: NO, JP, HU, TR. All other languages have been brought up-to-date if they were missing translations.
  • removed ICQ and Skype (which have been turned off) from user profile
  • new feature: the POP3 mail integration can now import attachments from mails and save those along with the newly created posts (development sponsored by https://captaincasa.org/)
  • Attachments can be added by Drag & Drop, in addition to being uploaded explicitly
  • set Secure and HttpOnly flags on cookies

Libraries

  • update Apache Commons FileUpload2 from 2.0.0-M3 to 2.0.0-M6
  • update Apache Commons IO from 2.13.0. to 2.22.0
  • update Apache Commons Lang3 from 3.12.0. to 3.20.0
  • update Apache Commons Text from 1.10.0. to 1.15.0
  • update Apache FreeMarker from 2.3.32 to 2.3.34
  • update Apache log4j from 2.20.0 to 2.25.4
  • update Apache Lucene from 8.11.2 to 9.12.3
  • update Apache PDFBox from 3.0.0. to 3.0.8
  • update C3P0 from 0.9.5.5 to 0.14.1
  • update HikariCP from 6.3.0 to 6.3.3
  • update HSQLDB from 2.7.2 to 2.7.4
  • update jsoup from 1.16.1 to 1.23.1
  • update Microsoft JDBC driver from 12.4.1.jre8 to 13.4.0.jre11
  • update MySQL JDBC driver from 8.1.0 to 9.7.0
  • update Oracle JDBC driver from 21.11.0.0 to 23.9.0.25.07
  • update PostgreSQL JDBC driver from 42.6.0 to 42.7.13
  • update slf4j from 2.0.9 to 2.0.18

New Configurations

Entry name Default value Description
mail.pop3.integration.attachments true causes the POP3 mail integration to import attachments from emails

Database Schema

Related

Wiki: UpgradingFrom283to290

Cerberus Logo