Skip to main content
Version: 2.20.x

Release Notes

ebms-core-2.20.10.jar​

  • hardened XML (JAXB/XSD) parsing against billion-laughs & XXE
  • hardened the EbMS protocol endpoint against DoS and information disclosure (per-client rate limiting, stronger basic authentication); no longer leak exception details in ebmsErrorReason
  • fixed: cipher suites were silently ignored when the protocols list was left empty
  • updated dependencies

Note: The server now caps the size of received messages via the new default setting ebmsMessage.maxMessageSize=104857600 (100 MiB). Messages larger than this limit are rejected. This may break existing flows that exchange messages over 100 MiB — raise the limit to the maximum you expect, or set ebmsMessage.maxMessageSize=0 to disable the limit.

ebms-core-2.20.9.jar​

  • fixed delivery: prevent duplicate retries on 2xx responses and unrecoverable errors
  • updated dependencies

ebms-core-2.20.8.jar​

  • fixed MSSQL migration scripts
  • improved database plugin tests

ebms-core-2.20.7.jar​

  • updated dependencies
  • hardened ebms core
  • restructured ebms server internals and improvements

ebms-core-2.20.6.jar​

  • updated dependencies
  • fixed empty header value issue
  • fixed missing ehcache dependency

ebms-core-2.20.5.jar​

  • put database libraries in separate plugins
  • removed kafka support
  • added EchoHeaderServlet
  • added client UUID header
  • improvements

Note: Download the right database plugin and add it to the classpath. The configuration of the database stays the same.

ebms-core-2.20.4.jar​

  • updated dependencies
  • added MDCServletFilter
  • improved caching key generation
  • added Hazelcast cache plugin

To enable EhCache or Hazelcast:

  • add the library to the classpath
  • set environment variable cache_type="PLUGIN"
  • you can override the default config by setting the environment variable cache_configLocation

ebms-core-2.20.3.jar​

  • fixed database pool properties
  • fixed: org.quartz.SchedulerConfigException: Non-ManagedTX DataSource name not set!
  • updated dependencies

ebms-core-2.20.2.jar​

  • removed Azure keyvault support

ebms-core-2.20.1.jar​

  • reverted namespace prefixes
  • updated dependencies

ebms-core-2.20.0.jar​

  • upgrade to Java 17
  • upgrade to Spring 6
  • upgrade libraries from javax to jakarta
  • split core in multiple modules
  • removed Ignite caching support
  • ehcache is provided as a separate library