🐞 We are thrilled to announce the release of version 4.8.18 of ARender, bringing along significant enhancements and fixes to optimize your user experience. This version emphasizes on security and stability, with two critical security fixes and several other bug fixes! 🚀.

Reminder: Multiple major security fixes have been added since the version 4.8.8: if you have not update to 4.8.8 yet, we highly recommend all our customers to update to version 2023.x or 4.8.18!

Security fixes

‣ Rendition

🔒🛠️ Critical Security Vulnerability CVE-2023-36664! 🚀

We fixed a major security vulnerability related to the use of GhostScript. To ensure the security of our users, we have removed GhostScript installation from our installers. We recommend integrators to install version 10.01.2 or higher and ensure having an up-to-date license. (AR-16882)

‣ WEB-UI & Rendition

🔒🛠️ Medium Security Vulnerabilities! 🚀
The following CVEs have been fixed in this version:

• CVE-2023-20863
• CVE-2023-20861
• CVE-2022-22971
• CVE-2022-22970
• CVE-2022-22968
• CVE-2021-22096
• CVE-2021-22060
  

Others fixes

‣ Rendition

🛠️✨ PNG Image Conversion Fix in ARender 4.8.18 🖼️🔄
We resolved an issue where large PNG image conversions were producing blank PDFs instead of PDFs with the corresponding image. This fix enhances the quality and reliability of image conversions in ARender. (TMAPR-5593 and AR-16716)

🛠️📁 Cache Management Improvement in Rendition!
We fixed an issue in the Rendition component where deleting cache items was abnormally resulting in the creation of a folder in the temporary file system directory. This ensures better cache management and avoids unnecessary folder creation. (TMAPR-5640 and AR-16737).

Known issues

• DirectOffice optional third party is not compatible with the Linux Rendition installer.
• Redaction feature: we recommend updating to version 2023 to use this feature as we have detected in version 4 some issues with the download with redaction when documents were rotated.