Overview of Released Hotfixes for 10.16 (LTS)

Hotfixes for component version date yuuvis_rad_service-manager 10.16.65 08.09.2026 Solved Tickets ticket number description component priority support call DB-10361 Bug in reference view solved yuuvis RAD client Blocker

Hotfixes for component version date yuuvis_rad_service-manager 10.16.64 05.09.2026 Solved Tickets ticket number description component priority support call TUK-9987 Security findings: Tomcat was updated to 11.0.25 in serveral micro services. yuuvis RAD infrastructure Major DB-10349 New table entries get a "isNewRow" value which blocks saving yuuvis RAD client Blocker

Hotfixes for component version date yuuvis_rad_service-manager 10.16.63 31.08.2026 provider-scheduler 4.1.0 26.08.2026 wopi-host 4.1.0 26.08.2026 provider-server 4.1.0 26.08.2026 provider-client 4.1.0 26.08.2026 Solved Tickets ticket number description component priority support call TUK-9924 BPM Service, Inbox-Service und RM-AL + RM-ILM are updated yuuvis RAD service-manager Major TUK-9913 Security updates for the client. yuuvis RAD client Blocker DB-10313 Sharing a saved search no longer requires the "manage organization" permission. yuuvis RAD client Major 00108283 TUK-9854 Security Fix for CVE-2026-54399 yuuvis RAD service-manager Critical DB-10288 Dropping a file into a folder now offers the same storage locations as the manual file upload. yuuvis RAD client Major SPAR-2406 Ein Fehler wurde behoben, der bei der Verarbeitung sehr großer Dateien in der Office-365-Integration zu einem Speicherüberlauf (Out-of-Memory) führen konnte. Office 365 provider (internal) Major SPAR-2401 Sicherheitslücken in Abhängigkeiten der Office-365-Integration (Cloud Provider: Server) wurden behoben. Office 365 admin (internal) Blocker SPAR-2400 Sicherheitslücken in Abhängigkeiten der Office-365-Integration (Cloud Provider: Scheduler) wurden behoben. Office 365 scheduler (internal) Blocker SPAR-2399 Eine Sicherheitslücke in der Office-365-Integration (Cloud Provider: Admin, Angular-Oberfläche) wurde behoben. Office 365 admin (internal) Blocker SPAR-2398 Sicherheitslücken in Abhängigkeiten der Office-365-Integration (Cloud Provider: Admin) wurden behoben. Office 365 admin (internal) Blocker SPAR-2353 Es wurde ein Fehler behoben, durch den beim manuellen Löschen von Dokumenten diese beim Neuladen der App wieder zur Verfügung standen. yuuvis for-outlook Major SPAR-2345 Fremdbibliotheken wurden aktualisiert, um gemeldete Sicherheitslücken zu schließen. Office 365 admin (internal) Blocker SPAR-2240 Bleibt eine Datei nach der Bearbeitung in Microsoft 365 gesperrt, kann die Sperre in der Office-365-Integration nun durch die oder den letzte/n Bearbeitende/n manuell aufgehoben werden. enaio dashlet365 service , enaio Office 365 service , Office 365 host (internal), Office 365 provider (internal) Major SPAR-2234 Es wurden sicherheitsrelevante Schwachstellen identifiziert und behoben. Office 365 provider (internal) Blocker SPAR-2233 Es wurden sicherheitsrelevante Schwachstellen identifiziert und behoben. Office 365 scheduler (internal) Blocker SPAR-2231 Es wurden sicherheitsrelevante Schwachstellen identifiziert und behoben. Office 365 admin (internal) Blocker DB-10051 Ein Fehler wurde behoben, der beim CSPP-Test der Office-365-Integration zu einer fehlerhaften Antwort (409) des WOPI-Dienstes führen konnte. enaio Office 365 service Major 00102608 FLA-5161 Sicherheits-Updates enaio archive-service Major

Hotfixes for component version date yuuvis_rad_service-manager 10.16.61 27.07.2026 Solved Tickets ticket number description component priority support call DB-10270 In the prepare state a blank in the object header is missed yuuvis RAD client Minor 00107213 TUK-9569 Sicherheits-Updates yuuvis RAD archive-service Blocker DB-10251 Table values written back via Form Scripting now show the catalog display names in the grid instead of the technical values. yuuvis RAD client Major 00106612 TUK-9514 The repository manager achivelink and ILM are based on Spring Boot 4.1.0 yuuvis RAD service-manager Major TUK-9442 The archive-service fails on certain S3-Cloudian backends. yuuvis RAD archive-service Major TUK-9440 The improvements for IP filters are adapted to the gateway and infrastructure services yuuvis RAD gateway, yuuvis RAD infrastructure Major DB-10179 A table import without ID fields no longer fails when "Meta-Info" is removed from the sheet. yuuvis RAD client Major TUK-8953 The activemq-broker dependencies are removed and third party libraries updated yuuvis RAD search-service Major TUK-6630 The viewer service is now called only once per document instead of multiple times. yuuvis RAD client Critical

Hotfixes for component version date yuuvis_rad_core-service 10.16.41 24.07.2026 Solved Tickets ticket number description component priority support call TUK-9657 An error that occurred when downloading the original file for objects with umlauts or special characters in their filenames has been fixed yuuvis RAD core-service Blocker

Hotfixes for component version date yuuvis_rad_outlook_addin 10.0.1 12.06.2026 Solved Tickets ticket number description component priority support call LEO-9433 Security Update - Updating 3rd party libraries yuuvis RAD outlook-add-in Major

Hotfixes for component version date yuuvis_rad_service-manager 10.16.60 24.06.2026 yuuvis_rad_core-service 10.16.40 01.07.2026 Solved Tickets ticket number description component priority support call TUK-9396 Add the Spring Boot 4.1.0 based INBOX-Serivce 10.7.2 and BPM-Service 10.7.2 to the service-manager setup yuuvis RAD service-manager Major TUK-9242 The yuuvis RAD rendition-sidecar is updated to Spring Boot 4.1.0 yuuvis RAD rendition-sidecar Major TUK-9241 The yuuvis RAD dms-sidecar is updated to Spring Boot 4.1.0 yuuvis RAD dms-sidecar Major TUK-9240 The yuuvis RAD template-service is updated to Spring Boot 4.1.0 yuuvis RAD template-service Major TUK-9239 The yuuvis RAD gateway-service is updated to Spring Boot 4.1.0 yuuvis RAD gateway Major TUK-9238 The yuuvis RAD messaging-service is updated to Spring Boot 4.1.0 yuuvis RAD messaging-service Major TUK-9237 The yuuvis RAD agent-service is updated to Spring Boot 4.1.0 yuuvis RAD agent-service Major TUK-9236 The yuuvis RAD client-service is updated to Spring Boot 4.1.0 yuuvis RAD client-service Major TUK-9132 The yuuvis RAD index-service is updated to Spring Boot 4.1.0 yuuvis RAD inbox-service Major TUK-9131 The yuuvis RAD search-service is updated to Spring Boot 4.1.0 yuuvis RAD search-service Major TUK-9130 The yuuvis RAD microservice infrastructure is updated to Spring Boot 4.1.0 yuuvis RAD infrastructure Major TUK-8902 The signing-service is upgraded to Spring Boot 4.1.0 yuuvis RAD signing-service Major TUK-8899 The extraction-service is upgraded to Spring Boot 4.1.0 yuuvis RAD extraction-service Major ERA-11755 Security Updates yuuvis RAD inbox-service Blocker ERA-11754 Security Updates yuuvis RAD bpm-service Blocker TUK-9419 The core-service is updated to WildFly 40.0.1.Final yuuvis RAD core-service Major

Hotfixes for component version date yuuvis_rad_service-manager 10.16.50 22.06.2026 Solved Tickets ticket number description component priority support call DB-10172 The actions menu for the result list in the object-state cannot be opened yuuvis RAD client Blocker DB-10128 The preview does not show a file with the polish e-invoice format yuuvis RAD client Major 00103738

Hotfixes for component version date yuuvis_rad_service-manager 10.16.49 18.06.2026 Solved Tickets ticket number description component priority support call TUK-9277 Security-Updates yuuvis RAD template-service Blocker TUK-9275 Security-Updates yuuvis RAD signing-service Blocker TUK-9273 Security-Updates yuuvis RAD search-service Blocker TUK-9272 Security-Updates yuuvis RAD ocr-service Blocker TUK-9271 Security-Updates yuuvis RAD messaging-service Blocker TUK-9270 Security-Updates yuuvis RAD index-service Blocker TUK-9269 Security-Updates yuuvis RAD extraction-service Blocker TUK-9267 Security-Updates yuuvis RAD dms-sidecar Blocker TUK-9266 Security-Updates yuuvis RAD client-service Blocker TUK-9264 Security-Updates yuuvis RAD agent-service Blocker DB-10147 Filter values in a saved search cannot be overwritten yuuvis RAD client Major 00104502 TUK-9265 Security-Updates yuuvis RAD client Blocker DB-10125 In the upload dialog former locations are still available for selection yuuvis RAD client Major 00104314 SAP-3979 Security-Updates yuuvis RAD repositorymanager-al, repositorymanager-ilm Blocker DB-10120 Reference documents cannot be accessed via ArchiveLink yuuvis RAD repositorymanager-al Major 00093231

Hotfixes for component version date yuuvis_rad_core-service 10.16.37 15.06.2026 Solved Tickets ticket number description component priority support call DB-10155 Archiving results in huge logs yuuvis RAD core-service Critical 00105099

Hotfixes for component version date yuuvis_rad_rendition-plus 5.0.11 04.06.2026 wopi-host 4.0.6 21.05.2026 provider-scheduler 4.0.4 20.05.2026 provider 4.0.7 20.05.2026 provider-admin 4.0.4 20.05.2026 Solved Tickets ticket number description component priority support call OKTO-7129 Seciruty Updates yuuvis RAD rendition Blocker OKTO-7121 Seciruty Updates yuuvis RAD rendition Blocker OKTO-6966 CVE-2026-22732 fixed in yuuvis RAD rendition yuuvis RAD rendition Major SPAR-2098 Critical security vulnerabilities in the cloud components have been identified and resolved provider-admin, provider, wopi-host, provider-scheduler Major

Hotfixes for component version date yuuvis_rad_service-manager 10.16.47 19.05.2026 yuuvis_rad_core-service 10.16.35 15.05.2026 Solved Tickets ticket number description component priority support call DB-10063 The viewer-service restarts when trying to open the environment variables via the admin service yuuvis RAD viewer-service Major TUK-9106 Upgrade to spring boot 3.5.14 yuuvis RAD adminservice, yuuvis RAD gateway Critical DB-10052 Hit count widget open always in new browser tab yuuvis RAD client Major 00101941 DB-10024 TypeError (checkSelected) in Dynamic Catalog within the Search Form yuuvis RAD client Major 00101938 DB-9993 History Aspect filter is not applied when navigating between documents (filter state persists visually only) yuuvis RAD client Major 00101073 FLA-4775 Update camel in archiveservice yuuvis RAD archive-service Major DB-10089 Solved user enumeration vulnerability yuuvis Rad core-service Major 00103346

Hotfixes for component version date yuuvis_rad_service-manager 10.16.46 27.04.2026 OS_64bit_outlook_add-in_dd 2.10.4 28.04.2026 OS_32bit_outlook_add-in_dd 2.10.4 28.04.2026 Solved Tickets ticket number description component priority support call SAP-3929 The critical security vulnerability CVE-2026-29145 has been fixed. yuuvis RAD repositorymanager-alink Major SAP-3716 Services patch hardening yuuvis RAD repositorymanager-ilm Major SAP-3927 The critical security vulnerability CVE-2026-29145 has been fixed yuuvis RAD repositorymanager-ilm Major TUK-8954 Some microservices use outdated Camel versions -> Update to Camel Version 4.18. (LTS) yuuvis RAD service-manager Major TUK-8929 Apache Tomcat with Vulnerability CVE-2026-29145 -> Update all effected microservices to Spring Boot 3.5.13 yuuvis RAD service-manager Critical TUK-7575 Security optimization: The script execution in PDF.js which is disabled yuuvis RAD viewer-service Major TUK-8989 The PDF.js viewer provided by the viewer-service uses the browser language, but not the set client language of the user -> update PDF.js from version 4.8.69 to 5.6.205 yuuvis RAD viewer-service Major SPAR-2163 O365 cloud service(provider, scheduler) + O365 microservices with critical CVE-2026-22732 -> Update Spring Boot to 3.5.13 yuuvis RAD office365-service Major LEO-9319 Outlook Drag&Drop Addin - Update Redemption Outlook Drag&Drop Addin Major DB-10021 An error message appears when printing a multi-page PDF document yuuvis RAD viewer-service Critical 00101940

Hotfixes for component version date yuuvis_rad_core-service 10.16.34 17.04.2026 Solved Tickets ticket number description component priority support call DB-10031 BPM-Engine looses JMS connection and run into heap overflow yuuvis RAD core-service Critical

Hotfixes for component version date yuuvis_rad_core-service 10.16.33 16.04.2026 yuuvis_rad_service-manager 10.16.44 16.04.2026 wopi-host 4.0.5 15.04.2026 provider-scheduler 4.0.3 17.04.2026 provider 4.0.6 16.04.2026 Solved Tickets ticket number description component priority support call TUK-8930 Lodash with vulnerabilty CVE-2026-4800 - update core-service to Lodash version 4.18.1 yuuvis RAD core-service Critical DB-10016 BPM-Engine sometimes returns this.scope is null error yuuvis RAD core-service Critical TUK-8880 The core-service uses Camel for features - remove unused dependencies yuuvis RAD core-service Major DB-10015 Update to Camel Version 4.10.9 |yuuvis RAD service-manager Major 00100552 TUK-8776 Critical CVE-2026-22732 - Update all microservices to Spring Boot to 3.5.13 yuuvis RAD service-manager Critical TUK-8492 Prepare the setup for "The core-service uses ANTLR4 instead of ANTLR2 for ESQL Parsing" yuuvis RAD core-service Major SPAR-2163 O365 cloud service(provider, scheduler) + O365 microservices with critical CVE-2026-22732 -> Update Spring Boot to 3.5.13 yuuvis RAD Office 365 service Major SPAR-2105 O365 - File not displayable in some cases yuuvis RAD Office 365 service Major DB-9827 O365 - Office files cannot be previewed after WOPI upgrade yuuvis RAD Office 365 service Major 00097919, CIM-7997

Hotfixes for component version date yuuvis_rad_elasticsearch 7.17.29.2 16.04.2026 Solved Tickets ticket number description component priority support call DB-10026 Elasticsearch Setup 7.17.29.1 sets service user to invalid one yuuvis RAD Elasticsearch setup Critical DB-9855 CVE-2021-39144 Vulnerability in ElasticSearch yuvvis RAD elasticsearch Major 00098462

Hotfixes for component version date yuuvis_rad_rendition-plus 5.0.10 30.03.2026 Solved Tickets ticket number description component priority support call DB-9976 DocumentViewer requires a VCRedist update following the hotfix yuuvis RAD rendition Major 00099969 DB-9908 Security Updates yuuvis RAD rendition Major 00099529

Hotfixes for component version date yuuvis_rad_service-manager 10.16.43 08.04.2026 Solved Tickets ticket number description component priority support call DB-9934 Elasticsearch query parsing error failed to parse field yuuvis RAD structure-service Major 00098366 DB-9771 Selection of values of dynamic lists is not possible anymore yuuvis RAD client Critical

Hotfixes for component version date provider-server 4.0.5 30.03.2026 wopi-host 4.0.3 30.03.2026 provider-scheduler 4.0.2 31.03.2026 Solved Tickets ticket number description component priority support call SPAR-2085 O365 - Automatic unlocking of O365 files after editing session provider-admin, provider-server, provider-scheduler

Hotfixes for component version date yuuvis_rad_core-service 10.16.30 23.03.2026 Solved Tickets ticket number description component priority support call DB-9956 Vulnerability CVE-2025-23368: Update to WildFly 39.0.1.Final yuuvis RAD core-service Critical

Hotfixes for component version date yuuvis_rad_rendition-plus 5.0.9 13.03.2025 Solved Tickets ticket number description component priority support call DB-9889 OCR issue solved yuuvis RAD rendition plus Major 00099088 DB-9791 Issue with long file name fixed yuuvis RAD rendition plus Major 00096833

Hotfixes for component version date provider-admin 4.0.3 10.03.2026 yuuvis_rad_service-manager 10.16.42 10.03.2026 Solved Tickets ticket number description component priority support call SPAR-2065 Critical findings in O365 admin UI - Angular provider-admin DB-9812 Refresh button in context-state does not work yuuvis RAD client Major DB-9673 Searching in table fields in combination with "Without value" is no longer functional. yuuvis RAD client Major 00094598 DB-9549 In the Full-text search Enter triggers search with first autocomplete suggestion instead of entered text yuuvis RAD client Major 00092552

Hotfixes for component version date yuuvis_rad_service-manager 10.16.41 03.03.2026 Solved Tickets ticket number description component priority support call TUK-8568 Update of the fastxml-parser supporting the X-Rechnung viewer to newer version to fix CVE-2026-25896 yuuvis RAD client Critical SPAR-2077 Update yR office365 due to critical security findings yuuvis RAD Office365 integration Major DB-9823 MSG files cause the viewer-service to crash yuuvis RAD service-manager Major 00096761 DB-9802 Undertow Critical Vulnerability - CVE-2025-12543 yuuvis RAD service-manager Major

Hotfixes for component version date wopi-host 4.0.2 27.02.2026 provider-server 4.0.4 27.02.2026 provider-admin 4.0.2 27.02.2026 provider-scheduler 4.0.1 27.02.2026 Solved Tickets ticket number description component priority support call SPAR-2064 Critical security finding in eclipse-temurin:21-jre-alpine provider-server, provider-admin, provider-scheduler, wopi-host Major

Hotfixes for component version date yuuvis_rad_core-service 10.16.29 06.02.2026 yuuvis_rad_service-manager 10.16.40 23.02.2026 Solved Tickets ticket number description component priority support call DB-9802,DB-9815 The core-service is upgraded to Wildfly 39.0.0Final & JDK 17.0.15_6 -> 17.0.18_8 & Postgres: postgresql-42.7.6 -> postgresql-42.7.9 & Ms-SQL: 12.10.0.jre11 -> mssql-jdbc-13.2.1.jre11 yuuvis RAD core-service Critical DB-9809 Core-Service fails to write creator and modifier to Elasticsearch if search right is missing yuuvis RAD core-service Critical TUK-8379 The yuuvis RAD microservices are upgraded to Spring Boot 3.5.10 & Spring Cloud 2025.0.1 yuuvis RAD service-manager Critical FLA-4493 Security-Updates yuuvis RAD archive-service Critical 00097460 DB-9845, DB-9844 SAP connection does not start after Service Manager update yuuvis RAD rmalink Major 00098249 DB-9867 Copy & Paste of date values does not work with European date format (DD.MM.YYYY) yuuvis RAD client Major 00097760 DB-9754 CSV export fails if result list is filtered by catalog entry field yuuvis RAD client Major DB-9823 MSG files cause the viewer-service to crash yuuvis RAD viewerservice Major 00096761 TUK-8476 Discoveryservice prints error messages about "Error while closing the output stream..." yuuvis RAD discoveryservice Major

Hotfixes for component version date yuuvis_rad_rendition-plus 5.0.8 19.01.2026 wopi-host 4.0.1 16.01.2026 provider-server 4.0.1 16.01.2026 provider-admin 4.0.0 28.11.2025 provider-scheduler 4.0.0 28.11.2025 Solved Tickets ticket number description component priority support call DB-9762 CVE-2025-66516 - Vulnerability in Apache Tika fixed yuuvis RAD rendition-plus Critical 00096382 SPAR-1948 O365 - Microsoft CSPP Reverification wopi-host, provider-server Major SPAR-1949 Required WOPI Validator tests wopi-host, provider-server Major SPAR-1273 Housekeeping Q4/2025 for every cloud component wopi-host, provider-server, provider-admin, provider-scheduler Major

Hotfixes for component version date yuuvis_rad_service-manager 10.16.37 13.01.2026 yuuvis_rad_core-service 10.16.27 12.01.2026 Solved Tickets ticket number description component priority support call TUK-8209 CVE-2025-24813 [Critical 9.1] – WebFlux / Spring Cloud -> Update of service infrastructure to Spring Boot 3.4.13 and Spring Cloud 2024.0.3 yuuvis RAD dms-sidecar, yuuvis RAD rendition-sidecar Major SAP-3719 Services patch hardening - RMALINK yuuvis RAD repositorymanageral Major DB-9782 Horizontal scroll bar not usable when the search results list is empty yuuvis RAD client Major 00096821 DB-9781 Content preview from the recycle bin is not working yuuvis RAD core-service Major 00096810 DB-9308 Core-Service fails to create objects because garbage collector removes weak references too early yuuvis RAD core-service Critical