Skip to main content
← Back to index page

10.0.7

Read before updating

webPDF 10.0.7 focuses on hardening the 10.0 line: we reviewed the security, robustness and reliability of the server, the cluster and the installation. To close security gaps and correct wrong results, several defaults and behaviors had to change, some of them incompatible with earlier 10.0.x versions. Read the important changes below before you update, and test the update in a test environment before you install it in production - we always recommend this, and especially for this release.

💥 Important changes​

🔥 marks a breaking change. Entries labeled Cluster only concern webPDF in cluster mode.

Configuration and operation - for administrators

  • 🔥 WEBPDF-2834 Server: LDAP: a referral from an ldaps connection to an unencrypted ldap target is no longer followed. New optional checks of the host name and the referral targets are off by default 🔗
  • 🔥 WEBPDF-2146 Server: The license key is checked more strictly. A server running with a mistyped key starts in demo mode; enter the key exactly as it was issued 🔗
  • 🔥 WEBPDF-2831 Server: A SOAP fileURL with http(s):// now uses the configured proxy and HTTP settings. Add targets that have to bypass the proxy to its non-proxy hosts 🔗
  • 🔥 WEBPDF-2928 Server: On a server with a Turkish or Azerbaijani default locale, environment settings whose name contains an I now take effect; check which of them are set before you update
  • 🔥 WEBPDF-3384 Server: Metrics (Prometheus): the Tomcat metrics no longer carry the tag instance, and the task counters of the thread pools were renamed. Adjust queries, dashboards and alert rules 🔗
  • 🔥 WEBPDF-2879 Installer: On Windows, custom JVM settings now belong in the .vmoptions files of the configuration folder, which an update never replaces. Settings changed in the installation folder up to 10.0.6 are not taken over. On Linux, use a systemd drop-in 🔗
  • WEBPDF-3146 Installer: An update on Windows no longer rewrites application.xml and server.xml and keeps placeholders (${...}). An installation over a kept configuration takes over its license key and ports 🔗
  • WEBPDF-2878 Installer: Updating the DEB or RPM package now restarts the server, and uninstalling it stops the server 🔗
  • Installer: The script supportinfo.sh is no longer part of the DEB and RPM packages; use the support package of the Admin Portal instead 🔗
  • WEBPDF-3391 Server: Chromium: the setting headlessMode is deprecated and no longer has an effect, because Chromium removed the old headless mode 🔗

Cluster - only relevant in cluster mode

  • 🔥 WEBPDF-3305 Cluster: The namespace now consists of a prefix, the version and a revision; the other namespace settings of 10.0.6 are ignored. There is no automatic migration: stop all nodes, empty Redis/Valkey and the file storage (MinIO/S3, Azure Blob, SMB, shared folder), and start all nodes with 10.0.7. Users have to log in again, and the documents of running sessions are lost 🔗
  • 🔥 WEBPDF-3339 Cluster: A local file storage folder in a cluster requires sharedUsage; without it, the node does not start 🔗
  • 🔥 WEBPDF-3314 Cluster: The validation in the Admin Portal always checks the bucket or container the node uses. Azure Blob needs the list permission (l) on the container, otherwise the node no longer starts 🔗

Web services and API - for integrations and clients

  • 🔥 WEBPDF-2744 Server: file: URIs are rejected by default, for document parameters with source="uri" as well as for the SOAP parameter fileURL (error code -29). Allow them explicitly only if your deployment needs them 🔗
  • 🔥 WEBPDF-3269 Server: Loading by address only accepts http and https addresses with a host name (error code -12); images of an e-mail or HTML conversion at other addresses are no longer loaded. An @ in the user information of an address must be written as %40 🔗
  • 🔥 WEBPDF-3323 Server: A session ends at once and for good. A refresh token can be redeemed only once, and tokens of an ended session (logout, expiry, restart with local session storage) are rejected with -9009; clients then have to log in again 🔗
  • 🔥 WEBPDF-3313 Server: OAuth2: the server assigns the session ID itself, and the sessions of external tokens are separated by user, application and issuer. External sessions stored in Redis/Valkey are not continued after the update, and scripts that close a session by its sub have to use the ID from the session table 🔗
  • 🔥 WEBPDF-2913 Server: A document with too deeply or cyclically nested content aborts redaction, OCR, rendering, printing, barcode detection and extraction with -5028 instead of returning an incomplete result 🔗
  • 🔥 WEBPDF-2899 Server: Signature: editing the annotations of a certified document whose permissions cannot be read is rejected with -5038, and a failing timestamp service is reported with -323 instead of -5003 🔗
  • 🔥 WEBPDF-3225 Server: Errors of the document storage (-21000 to -21008) are answered with HTTP 500 instead of 400, because they describe a problem of the server, not of the request 🔗
  • 🔥 WEBPDF-2960 Cluster: An empty storage reference fails with -21007, and Redis/Valkey errors while document IDs are generated return -22000 or -22001 instead of -50 🔗
  • 🔥 WEBPDF-3039 Server: A document download carries the file name including its extension. A client that renames a document with a name that already contains the extension receives the extension twice
  • 🔥 WEBPDF-3026 Server: A document extracted from another document (attachments, portfolio, split) reports the MIME type detected from its content and its own file name
  • 🔥 WEBPDF-3082 Server: Conversion reports: an e-mail now fails with the report error of a converted attachment (-107 to -109) instead of succeeding, a report message lists at most 100 entries, and a docx document that cannot be opened fails with -159 instead of -15 🔗
  • 🔥 WEBPDF-3302 Server: toolbox/extraction in the format xml fails with -802 if the extracted text contains a character that XML does not allow; use the format json for such documents 🔗
  • 🔥 WEBPDF-3148 Server: Forms: the export writes the export value of check boxes and radio buttons instead of their position, field names with a colon or an index marker are exported differently, the dataXPath of info/form is absolute, and invalid names or characters end the export with -1003. Test integrations that process form data
  • 🔥 WEBPDF-3120 Server: Toolbox: the document language (language) is checked as a language tag; malformed values such as de_DE are rejected with -21 🔗

Document output - documents can look different after the update

  • WEBPDF-3144 Server: The default font of the web services is now "Go Noto Current" instead of "Arial Unicode MS", so line breaks can change. The previous font can be set with defaultFont 🔗
  • WEBPDF-3150 Server: Missing fonts such as Arial, Times New Roman or Calibri are replaced by metric-compatible fonts (Liberation, Carlito) and by the alternate fonts a Word document names. This is on by default and can be switched off 🔗
  • WEBPDF-3020 Server: Variable fonts: the requested cut (for example Bold or Light) is embedded as the font designs it instead of an artificially thickened or slanted default cut 🔗
  • WEBPDF-2996 Server: The font search prefers the cut with the requested style and also finds the names Windows shows for a font, so the selected font can change for some documents 🔗
  • WEBPDF-3008 Server: Toolbox: text watermarks, headers/footers and free text annotations are positioned and sized from the font metrics, use the default font of the web service instead of Helvetica when no font is named, and free text annotations embed only a font subset 🔗
  • 🔥 WEBPDF-3121 Server: A visible signature is drawn with an embedded font instead of Helvetica. A text that no font can show or that does not fit into the field now fails with -337 or -338; set defaultFont to Helvetica to keep the previous behavior. Font, time zone, language and date format of the appearance can now be set 🔗
  • 🔥 WEBPDF-3197 Server: Annotations and form fields without an appearance are drawn like in Adobe Acrobat, with a substitute font for missing characters. If no font has a character, the operation fails with -1213 instead of losing text silently 🔗
  • WEBPDF-3172 Server: The option adjustFonts of HTML and e-mail conversion is deprecated and has no effect; the fonts are used as written in the document 🔗
  • WEBPDF-3113 Server: Conversions: times in the e-mail, calendar and contact templates show their time zone and use the time zone of the server, and a converted Word document takes its document language from its text instead of en-US 🔗

🔧 Security​

  • WEBPDF-3115 Cluster: Session and document IDs can no longer coincide with IDs that are still valid
  • WEBPDF-2861 Installer: The Windows service is registered with its path in quotation marks ("Unquoted Service Path")
  • WEBPDF-2957 Installer: The bundled Visual C++ Redistributable is updated to 14.51.36247.0 and replaces an older runtime
  • WEBPDF-3411 Portal: The rich text editor of free text annotations was removed because of a known vulnerability (CVE-2025-15056); the content is edited in a plain text field
  • WEBPDF-2804 Server: An embedded ZUGFeRD/Factur-X XML file with a DOCTYPE declaration is rejected (-411), and external entities are no longer resolved 🔗
  • WEBPDF-2882 Server: Large uploads are buffered in the temp folder of the server instead of the temporary folder of the operating system 🔗
  • WEBPDF-2946 Server: A visible signature with an oversized position or field can no longer exhaust the memory of the server 🔗
  • WEBPDF-3192 Server: The appearance the server creates for a password form field shows asterisks instead of the password
  • WEBPDF-3280 Server: Credentials in an address apply to that one request only and are no longer sent to other hosts
  • WEBPDF-3397 Server: Passwords, tokens, license keys and form field values no longer appear in the DEBUG log
  • WEBPDF-3398 Server: The bundled ImageMagick contains Brotli 1.2.1, which fixes CVE-2026-111497

📦 Components​

  • Update OpenJDK to 21.0.13+9
  • Update Tomcat to 10.1.61
  • Update Chromium to 156.0.8078.80
  • Update ImageMagick to 7.1.2-35 (delegate libraries libheif 1.23.7, LibRaw 0.22.3, libxml2 2.15.4 and FreeType 2.15.0)
  • Update Tesseract to 5.5.4 (Leptonica 1.87.0)
  • Update of Outside In to version 8.5.8 (Patch 5)
  • Update Maven libraries
  • Update npm libraries of the Portal

List of used components

🚀 New Feature​

  • WEBPDF-3252 Cluster: Warning and metric when Redis/Valkey may evict keys (maxmemory-policy other than noeviction) 🔗
  • WEBPDF-3316 Cluster: The files of ended sessions and deleted documents are also removed from SMB shares and shared folders, and SMB downloads above 2 GiB are possible 🔗
  • WEBPDF-3349 Cluster: A namespace belongs to one cluster; a node of another cluster on the same namespace does not start 🔗
  • WEBPDF-2353 Portal: The conversion dialog and the Admin Portal offer the new options of the integrated Word Converter
  • WEBPDF-3045 Portal: Invoice validation in the Client Portal, also for an invoice XML without a PDF, with a reworked PDF/A validation report and ZUGFeRD 2.4 and 2.5
  • WEBPDF-3133 Portal: The Admin Portal covers the new settings of this version: font directories, default fonts and font substitution, locale and time zone, the signature font and the LDAP host name and referral checks
  • WEBPDF-3304 Portal: Cluster: the Admin Portal shows the namespace, the storage paths and bucket or container names, and the state of the cache server (Redis/Valkey)
  • WEBPDF-3326 Portal: The session table of the Admin Portal shows the owner of a session (kind, user, application, issuer)
  • WEBPDF-1935 Server: Rule validation of ZUGFeRD/Factur-X/XRechnung invoices against the official rule packages (KoSIT, Landrix) in PDF/A conversion and validation, and with the new invoice operation of the Pdfa web service 🔗
  • WEBPDF-2922 Server: Own font directory (fontPath) for the Toolbox, OCR, Barcode and Signature web services 🔗
  • WEBPDF-3018 Server: Toolbox text operations reuse fonts that webPDF already embedded in the document, which keeps documents smaller 🔗
  • WEBPDF-3019 Server: Word Converter: embed complete fonts instead of subsets, or switch the integrated converter off in favor of Outside In 🔗
  • WEBPDF-3108 Server: Locale and time zone per conversion and as a server default for Word, e-mail, calendar, contact and HTML conversion 🔗
  • WEBPDF-3147 Server: 11 instead of 4 Go Noto fonts are installed, with italic styles, further CJK characters and emoji 🔗
  • WEBPDF-3193 Server: The form field information lists the widgets and export values of check boxes and radio buttons
  • WEBPDF-3382 Server: Metrics (Prometheus): new experimental metrics for sessions, documents and the memory of Redis/Valkey 🔗

🐛 Bug Fix​

  • WEBPDF-2848 Cluster: A member node that started without a license no longer stays in demo mode after it received the licensed configuration
  • WEBPDF-2959 Cluster: A failed upload to MinIO/S3 or Azure Blob no longer deletes the previous content of a document, and a failed store is rolled back completely 🔗
  • WEBPDF-3132 Cluster: A Redis/Valkey lock that expired or belonged to a cancelled request no longer blocks later requests or replaces the result of an operation
  • WEBPDF-3202 Cluster: MinIO/S3 transfers no longer leave thread pools behind, which could exhaust the thread limit of a container under load
  • WEBPDF-3210 Cluster: Sporadic upload and download failures of MinIO/S3 and Azure Blob under load are fixed, and documents above 2 GiB can be stored in MinIO 🔗
  • WEBPDF-3215 Cluster: Redis/Valkey: deleting sessions and documents no longer falls behind under load or stops after a restart of Redis, and no documents are left behind without a session 🔗
  • WEBPDF-3265 Cluster: A bucket or container that is missing at runtime and a storage that does not answer are reported at once (status DOWN) instead of being retried without limit 🔗
  • WEBPDF-3306 Cluster: Several nodes that start at the same time with a missing MinIO bucket now all start
  • WEBPDF-3322 Cluster: A session opened by an external identity provider is extended by later tokens instead of ending early
  • WEBPDF-3185 Container: The Docker image runs under the init process tini, so ended helper processes no longer remain as zombies 🔗
  • WEBPDF-2849 Installer: A valid license key whose licensee contains a backslash is accepted
  • WEBPDF-2956 Installer: Setup waits until the Windows service runs and reports a failed start; free ports on a busy machine are no longer rejected, and an unattended installation no longer stops at a message box
  • WEBPDF-3094 Installer: DEB and RPM updates no longer stop at a question about log4j2.xml, and the package scripts follow the conventions of the distribution 🔗
  • WEBPDF-2411 Portal: The area and clipping selection of the view dialog no longer changes the print scale
  • WEBPDF-2851 Portal: An invalid license key shows an understandable message instead of the error code only
  • WEBPDF-2966 Portal: Switching the debug mode no longer makes the Portal crash
  • WEBPDF-3001 Portal: The Admin Portal no longer writes a hash algorithm for the timestamp service when no timestamp service is configured
  • WEBPDF-3070 Portal: Filling in forms works with field names that contain a colon and follows the server's handling of check boxes and radio groups
  • WEBPDF-3081 Portal: The viewer no longer freezes on PDFs with an almost zero-width page or on large fax-compressed TIFF images, and redacting scanned PDFs with ink annotations works
  • WEBPDF-3233 Portal: Several browser tabs share their session reliably: a new refresh token no longer logs out another tab, an idle tab no longer ends the session, and errors of an external OAuth provider are shown; the Admin Portal warns when autoRefresh does not fit the lifetime of the access token
  • WEBPDF-3393 Portal: The preview of a Swiss QR code matches the code the server creates
  • WEBPDF-2639 Server: Worker threads are no longer lost when a thread cannot start, a session is closed during a job or an external program does not end, which reduced the number of parallel jobs until a restart
  • WEBPDF-2837 Server: Several defects of the LDAP connection (keep-alive, reconnect, failed bind) are fixed
  • WEBPDF-2847 Server: The server no longer reports demo mode under simultaneous status requests although a valid license is configured
  • WEBPDF-2896 Server: Attachments are reliably removed and found, also page level attachments and attachments with unusual names in documents from other producers
  • WEBPDF-2920 Server: A damaged or unusual font file (variable font, TrueType Collection, damaged character map or glyphs) no longer prevents a web service from starting or aborts processing; such a font is skipped or replaced 🔗
  • WEBPDF-2936 Server: A visible signature in a prepared field is laid out for the page of that field, and unusual but valid documents no longer end signing with an internal error
  • WEBPDF-2961 Server: A configuration override with an invalid value is logged as a warning instead of being ignored silently
  • WEBPDF-3051 Server: Characters drawn with the same glyph, for example the space and the no-break space, keep their meaning in text extraction
  • WEBPDF-3076 Server: Free text annotations with emoji and texts in symbol fonts (Wingdings, Symbol) no longer fail, and editing a multi-line annotation keeps its lines
  • WEBPDF-3134 Server: The server no longer rewrites server.xml, application.xml or users.xml at startup, which removed comments and placeholders 🔗
  • WEBPDF-3137 Server: Forms: import and export of check boxes, radio buttons, FDF data and ambiguous field names are fixed, and complex forms are processed much faster
  • WEBPDF-3186 Server: Dates in converted e-mails, calendars and contacts are correct under every locale and show the name of their time zone
  • WEBPDF-3203 Server: Chromium: an unresponsive browser is replaced automatically instead of failing HTML conversions with -160 until a restart 🔗
  • WEBPDF-3225 Server: The REST interface returns the actual error of a failed web service call, and a download during an overwrite of the document always delivers one complete version
  • WEBPDF-3296 Server: The extraction of words no longer fails with -15 for embedded fonts without a font descriptor
  • WEBPDF-3362 Server: Billing: the recorded runtime of an operation is no longer shortened by a correction of the system clock
  • WEBPDF-3385 Server: Characters written as numeric references in the XMP metadata of a PDF are no longer deleted
  • WEBPDF-3404 Server: Images with more than 8 bits per channel or with transparency are embedded correctly with JPEG compression, also in the OCR
  • WEBPDF-3111 Word Converter: DATE and TIME fields with AM/PM no longer abort the conversion, and weekdays and month names follow the language of the field
  • WEBPDF-3124 Word Converter: A cancelled conversion stops instead of running to its end
  • WEBPDF-3429 Word Converter: Many improvements of the layout fidelity, most of them from customer documents: tables and page breaks, lists and numbering, footnotes and endnotes, text boxes and drawings (shapes, fill patterns, transparency), fields, sections and hidden text, embedded objects, metafiles (EMF/WMF) and ActiveX form controls. Long documents and paragraphs with many formatting runs convert considerably faster 🔗