AEM 6.4 Service Pack Release Notes

Last update: May 3, 2023

CREATED FOR:

  • Leader
  • Developer
  • Admin
  • User
CAUTION
AEM 6.4 has reached the end of extended support and this documentation is no longer updated. For further details, see our technical support periods. Find the supported versions here.

Release Information

ProductsAdobe Experience Manager (AEM) 6.4
Version6.4.8.0
TypeService Pack Release
DateMarch 05, 2020
Download URLAEM 6.4.8.0 on Software Distribution

What’s included in AEM 6.4.8.0

AEM 6.4.8.0 is an important update that includes new features, key customer requested enhancements and performance, stability, security improvements, released since the general availability of AEM 6.4 in April 2018.

It is also cumulative which means that 6.4.8.0 includes all AEM 6.4 service packs released before it.

Some key highlights of this service pack release are:

  • The built-in repository (Apache Jackrabbit Oak) is updated to version 1.8.20.

  • Word wrap functionality is supported for Japanese websites in WCM-RTE.

  • Word break and line break processing are supported for Japanese websites.

  • Added support to use BUNSETSU method to break Japanese language sentence and lines at appropriate positions.

  • CCR UI for correspondence management now supports decimal values for German locale.

  • Form data model integration using SOAP web service now supports choice groups or attributes on elements.

  • AEM Assets is now configured with Brand Portal through Adobe I/O.

  • Updated the jQuery version bundled in ContextHub to 3.2.1.

List of changes

Sites

  • When a URL of an AEM Sites pages contains a colon or percentage symbol, the underlying browser stops responding and CPU cycles show a spike (NPR-32368, NPR-31917).
  • When an AEM Sites page is opened for editing and a component is copied, the paste action remains unavailable for some placeholders (NPR-32328).
  • Request for activation workflow does not include referenced assets (NPR-32304).
  • When a Blueprint is created, if the number of records is more than 80, only the first 80 records are displayed. Blueprint displays blank lines for the rest of the records (NPR-32058).
  • Users are allowed to save a Content Fragment without providing any information in the required fields (NPR-31988).
  • Automatic navigation does not work for path configured in a Core Experience Fragment Component (NPR-31921).
  • When you change the type of a table cell in Rich Text Editor (RTE), the below error occurs:
    Error: No common ancestor found, cannot continue (NPR-31916).
  • When content is moved within the same folder, the page move option is disabled (NPR-31841).
  • Added support to divide Japanese language sentences using the BUNSETSU method and break lines at the appropriate position (NPR-31836).
  • When you edit a hyperlink in Rich Text Editor (RTE), the newly selected path is not saved (NPR-31659).
  • When you delete a multifield component and undo the deletion, the component is restored but data is not restored (NPR-31617).

Assets

  • A folder with no name gets created in Dynamic Media Classic while moving an asset from one folder to another in Experience Manager with Dynamic Media Classic configuration (NPR-32440).

  • Assets detail page of PDF files do not show action buttons in Experience Manager running on Dynamic Media Scene7 mode (NPR-32316).

  • Asset and video renditions cannot be deleted (NPR-32213).

  • Calendar icon for activation scheduled is not showing in Status column (in Classic UI of DAM asset listing) for assets the activation of which is scheduled for a later date and time (NPR-32198).

  • Relationship of assets gets overwritten when assets are related to more than one assets using Other (NPR-32196).

  • Save button does not import Remote Set when user has not made any changes in Set Editor in Dynamic Media Client (NPR-32178).

  • PSD asset ingestion causes CPU spike and unresponsive Experience Manager Author instance (NPR-32165).

  • Out of Memory exception observed when a large ZIP file is uploaded in Experience Manager DAM (NPR-32155).

  • Version history URLs are displayed under Referenced By field on assets Property page (NPR-31889).

  • Unpublish from Brand Portal, on Manage Publication page, fails for sub-folders of a published folder (NPR-31835).

  • Dynamic Media video encodes fail to upload when Scene7 Cloud Configuration is placed in a private folder /conf instead of /conf/global (NPR-31779).

  • Image is not seen on the timeline after annotations are added, on Experience Manager running on Dynamic Media Scene7 run mode (NPR-31754).

  • ZIP file downloaded from DAM can’t be opened using WinZip (NPR-31745).

Integrations

  • The Company and Reporting Suite drop-down menus are hidden once Reporting Source is selected while configuring Adobe Analytics in Experience Manager cloud services (NPR-31729).

  • Adobe Campaign properties are not cleaned up when language copy of a newsletter linked to an Adobe Campaign is made, whereas clean up happens when a newsletter linked to an Adobe Campaign is copied or pasted (NPR-32540).

  • ReportSuitesServlet is vulnerable to SSRF (NPR-32161).

Sling

  • Non-deterministic shadowing of resource observation is not working (CQ-4286466).

Projects

  • Create button is not visible to the user even if the user has permission to create project in the sub-folder (NPR-31831).

  • The functionality to switch between Card View, List View and Calendar View is not working after selecting Calendar view in Projects (NPR-31829).

Translation

  • Translation project creation for multiple languages generates the project only for some of the languages instead of all and an error (resource resolver is already closed) is observed in the log (NPR-32212).

WCM-MSM

  • Permission issues lead to display of errors while moving pages within a blueprint (NPR-32610).

WCM-Page Editor

  • The browser stops responding while trying to add a component to a page with a specific URL format (NPR-32368, NPR-31917).

WCM-Admin UI

  • Manage publication does not include referenced assets in the request for activation workflow (NPR-32304).

Communities

  • Unable to update the group thumbnail image for groups (NPR-32603).

Brand Portal

  • Unpublish metadata schema in AEM Assets populates an error message although the schema is removed at backend (CQ-4286871).

Foundation UI

  • Invalid characters display in the URL added to a Button component (NPR-32684).

Forms

NOTE
AEM Service Pack does not include fixes for AEM Forms. They are delivered using a separate Forms add-on package. In addition, a cumulative installer is released that includes fixes for AEM Forms on JEE. For more information, see Install AEM Forms add-on package and Install AEM Forms JEE installer.

  • Designer: If the tagging option is enabled, the subform border disappears in the generated PDF output (NPR-32546, NPR-32322).

  • Designer: If there are merged cells in a table, the accessibility test fails for the output PDF file converted from an XDP form using the output service (NPR-32079).

  • Document Security: A protected PDF file fails to open offline with DisableGlobalOfflineSynchronizationData option set to True (NPR-32080).

  • Document Security: Issues while opening a protected PDF file after upgrading from ES4 to AEM 6.3 (NPR-32170).

  • Document Services: An error message displays while trying to convert a PDF file to a PDF/A document using the toPDFA conversion method (NPR-32663).

  • Document Services: An exception displays while applying Reader Extensions service on a PDF file (NPR-32639).

  • Document Services: An error message displays while assembling and converting XDP files to PDF files (NPR-31821).

  • Analytics do not display appropriate results on submitting or abandoning forms on a Sites page (NPR-31359).

Hotfixes and Feature Packs included in previous Service Packs

AEM 6.4.7.0

AEM 6.4.7.0 is an important update that includes performance, stability, security and key customer fixes and enhancements released since the general availability of AEM 6.4 in April 2018.

It is also cumulative which means that 6.4.7.0 includes all AEM 6.4 service packs release before it.

Some of the key highlights of AEM 6.4.7.0 are:

  • The built-in repository (Apache Jackrabbit Oak) is updated to version 1.8.17.
  • Added support to set version of a Sites page while deleting it.
  • New column for created date, which is sortable, has been added in DAM list view and on asset search results in List view (NPR-31311).
  • Asset sorting based on Name column has been allowed in List view.
  • Batch size and workflow step timeout for Reprocess and Batch Upload are now configurable from UI in Dynamic Media.
  • The pdfBrochure has been set to false in Scene 7 cloud configuration, to save memory at IPS.
Assets

Product enhancements

  • The export version of API package package com.day.cq.dam.handler.standard.msoffice supported by dam-handler bundle is upgraded to 6.0.0 (CQ-4279059).
    If you are using the package com.day.cq.dam.handler.standard.msoffice in your custom implementation, then it is advised that you compile your dam-handler bundle with the latest uber jar.

  • New column for created date, which is sortable, has been added in DAM list view and on asset search results in list view (NPR-31311).

  • Asset sorting based on Name column has been allowed in List view (NPR-31299).

Fixes

  • Metadata for some PDF documents is not updated and saved to the PDF on modifying its title (NPR-31575).

  • Assets with ‘+’ symbol in the filename cannot be deleted (NPR-30588).

  • DAM folder properties do not show the added users or groups (created by LDAP sync) in Closed User Groups (NPR-30555).

  • Special characters occurring in the Subject line of Email Templates are not shown properly (NPR-30547).

  • Asset names are changed to lower case when moving assets from one folder to another in AEM running on Dynamic Media Scene 7 runmode (NPR-31631).

  • Names of the imageset are changed to lower case in Scene 7, when imageset (or mediaset) is created and named with appropriate naming convention in DAM (NPR-31576).

  • Dynamic Media Encode Video workflow is failing to generate thumbnail for the video that is migrated from Scene 7 to Dynamic Media - Scene 7 run mode (NPR-31523).

  • Internal Server Error is observed while using filter to search for Sets, in AEM running on Dynamic Media - Scene 7 runmode (NPR-31388).

  • Error is observed while editing a remote imageset, for the image residing in the folder named same as Scene 7 company name (NPR-31347).

  • Assets containing references are not getting published (DM) (NPR-31179).

  • The expiration (client cache time to live) value configured for Dynamic Media Hybrid mode is not replicated to the Dynamic Media delivery environment (NPR-31126).

  • Uploads from AEM Dynamic Media - Scene 7 runmode to Scene 7 are taking too long to complete (NPR-30926).

  • After creating a page having Dynamic Media component while publishing the same, from author instance running on Dynamic Media - Scene 7 runmode, user is prompted to publish the dmscene7 configuration (NPR-30880).

  • Value of the “asset” parameter in viewer embed code stays unchanged after changing the values in “Title after move” and “Name after move” field on Dynamic Media - Scene 7 (NPR-30745).

  • Touch UI search (done through Omnisearch) results page automatically scrolls up and loses user’s scroll position (NPR-31306).

  • DAM Event Purge deletes the latest (maxSavedActivities) event data and holds the data created earlier (NPR-30870).

  • Asset title and name change not persisted after move operation to a destination folder that triggers infinite scrolling while selecting it (NPR-30647).

  • Collections are removed from the view on applying any filter in AEM Assets accessed from Adobe Asset Link (CQ-4280534).

  • Batch size and workflow step timeout for Reprocess and Batch Upload are not configurable from UI, and need to be set in CRXDE and workflow needs to be synced twice (CQ-4281254).

  • Workflow step name for batch upload and simple upload step is same in Scene 7, which leads to confusion (CQ-4281176).

  • Reprocess workflow in Scene 7 gets stuck if an asset is missing metadata node (CQ-4281170).

  • BatchUpload step in reprocess workflow does not work for the folder having video asset (CQ-4280630).

  • PDF options sent to DM have extractKeywords set to true by default (CQ-4280101).

  • Null Point Exception is observed on running Scene 7 Reprocess workflow on a folder containing non-DM assets (CQ-4279555).

  • Asset renaming in AEM fails to synchronize to scene 7, when an asset with a duplicate name already exists at Scene 7 (CQ-4276763).

  • Zip file sent by email for asset download fails to unzip when a user with Read permissions tries to open it (CQ-4277925).

  • PPT Rendition Workflow fails to generate renditions of the uploaded PPT files, as AEM 6.4 fails to update to com.adobe.granite.poi version 2.0.28 (CQ-4279059).

  • PDF files are not indexed and content within is not searchable (CQ-4278916).

Sites

  • When launches are promoted with Promote only Modified pages and Promote launches with modified pages are done, only the modified pages are appearing to be promoted. Moreover, when the list to be promoted is correct, the non-modified pages are still displayed at the bottom of the list (NPR-31314).

  • When an AEM Sites page is moved to a different location, its properties are not updated accordingly to reflect its new location(NPR-31265).

  • For a new Blueprint, If the number of records is more than 40, only the first 40 records are displayed. Blueprint displays blank lines for the rest of the records (NPR-31182).

  • When the number of LiveCopies is large, the LiveCopy overview takes a long time to render the preview (NPR-30945).

  • Added support to set a version of a page while deleting it. If versioning is disabled for the deleted page, AEM Sites cannot restore such pages (NPR-30891).

  • When a user adds Japanese or Korean characters in the description property of a menu, the menu displays distorted characters for Japanese and Korean language text (NPR-31331).

  • When a user focuses on left rail fields and uses a keyboard shortcut to paste content, it pastes the content of the page editor clipboard instead of the content copied from the left rail fields (NPR-31169).

  • When a user edits a content fragment, the already deleted variation of the content fragment is restored (NPR-31178).

  • Content Fragment Models query is inefficient. It is very slow if the instance has a lot of pages and results in an error (NPR-30666).

  • On saving the content fragment model, time in the date and time field is set to 00:00 (NPR-30540).

Integrations

  • When configuring Adobe Launch, a forward slash (/) is prepended in the library URL (NPR-30700).

  • ContextHub performance degrades after publishing (NPR-30884).

Sling
  • Update the webconsole security provider bundle version to 1.2.4 to remove dependency of launchpad starter api from webconsolesecurityprovider (NPR-30885).
Platform

  • Updates in buffer size configuration for Jetty-based HTTP service are not saved (NPR-30925).

  • QueryBuilder now supports orderby fn:name() in xpath queries (NPR-31322).

  • Updated Sling distributed event admin to version 1.1.4 improving the quality of logs in a clustered environment (NPR-29256).

Foundation UI

  • Scrolling to the end of the results page with a large number of search results causes the browser to crash (NPR-31332).

  • When switching from the Card view to the List view on a search results page, there is a lag before the page can be scrolled (NPR-31280).

Oak
  • MS Office files with .docx and .xlsx file extensions containing JPEG images fail to parse using Tika parser (NPR-31693).
Livefyre
  • Livefyre integration with AEM 6.4 upgrade gives Null Point Exception, when integration is done using DITA plugin for synthetic resources. The integration, however, works when components are added manually (FYR-11066).
Translation
  • The path to the destination experience fragment is not getting updated when promoting a launch page (NPR-30830).
Communities
  • Email functionality is not working properly in some cases even when email messaging is enabled in notification settings, system throws an exception in the NotificationsActivityStreamProvider (NPR-31521).
  • Not able to create new members, blank screen appears on Create Member screen in AEM author instance (NPR-30951).
  • User is not able to post a comment on a blog in Internet Explorer 11 (NPR-30927).
  • Administrator of a Restricted Group is not able to view the Group Card, unable to perform any Quick Link operations (Edit/Publish/Delete groups) in AEM author instance (NPR-30810).
  • Member groups/ Group information is not visible on creating a new Site in AEM author instance (NPR-28840).
Forms
NOTE
AEM Service Pack does not include fixes for AEM Forms. They are delivered using a separate Forms add-on package. In addition, a cumulative installer is released that includes fixes for AEM Forms on JEE. For more information, see Install AEM Forms add-on package and Install AEM Forms JEE installer.

Forms add-on package

Adaptive Forms

  • Strings contain the dictionary key while localizing adaptive forms (NPR-31109).

  • The checkboxes and drop-down lists in Forms fail Accessibility checks (NPR-31282).

HTML5 Forms

  • Generating HTML5 preview of an XDP form displays a flicker while adding instances of a subform (NPR-30907).

Document Services for OSGi

  • Running multiple simultaneous thread for assembling the forms using com.adobe.fd.assembler.service.AssemblerService.invoke() method displays an error message (NPR-31164).

  • The temporary files created by Assembler Service are not deleted automatically and requires AEM restart (NPR-30846).

  • Applying ReaderExtension Rights to PDF results in an error message (NPR-30930).

Workflow

  • OSGi workflow fails due to 100% CPU utilization (NPR-31234).

Forms JEE installer

Document Services

  • The Convert PDF Service fails to convert PDF documents to PostScript and displays an error message (NPR-31267).

  • SOAP endpoint configuration resets after applying a patch to fix HTML to PDF failure (NPR-31309).

PDFG Service

  • Unable to upload the Adobe PDF settings file downloaded using the admin UI (NPR-31273).

AEM 6.4.6.0

AEM 6.4.6.0 is an important update that includes performance, stability, security and key customer fixes and enhancements released since the general availability of AEM 6.4 in April 2018.

It is also cumulative which means that 6.4.6.0 includes all AEM 6.4 service packs release before it.

Some of the key highlights of AEM 6.4.6.0 are:

  • The built-in repository (Apache Jackrabbit Oak) is updated to version 1.8.15.
  • Added support for tracking dynamic-UI-states in tracking event in the foundation API.
  • Added rendition support to the image core component.

Assets

  • Asset share link of a folder with space and & character in the name displays blank gray cards for some assets. NPR-29934: Hotfix for CQ-4270187
  • DAM Workflow crashes while creating MP4 assets for AEM. NPR-30031: Hotfix for CQ-4271352
  • Adobe Smart Tag connectivity issue through Datapower. NPR-30026: Hotfix for CQ-4269457
  • PDF cannot be found using OmniSearch. NPR-30046: Hotfix for GRANITE-26290
  • Asset paths in URLs and folders metadata generated by the ACP API are not URL encoded. GRANITE-26198: Hotfix for CQ-4271814
  • Create Review task functionality does not work due to undefined payload. NPR-30469: Hotfix CQ-4274263
  • The ability to switch the view from card view to list view and vice-versa disappears after doing an OmniSearch on the asset picker. NPR-29852: Hotfix for CQ-4269369
  • (Touch UI) During the manage publication wizard, assets are added to the replication queue after the pages are added, hence causing some of the assets to appear after a few seconds. NPR-29985: Hotfix for CQ-4270724
  • Sorting search query by relevance returns InDesign documents along with InDesign templates. Hotfix for CQ-4273864
  • If the user has an uppercase email id, users are not able to check-in for those assets which have been previously checked out. Hotfix for CQ-4276575
  • Configuring Dynamic Media Cloud Services in DMHybrid mode results in multiple empty report suites created in Analytics with no report suite id stored on AEM resulting in report suite duplication. Hotfix for CQ-4276855
  • Warning dialog does not appear while promoting in “Managed Tag” page. Hotfix for CQ-4252851
  • When using the carousel for managing tags, the navigation button does not work. Hotfix for CQ-4275499
  • Bulk move asset functionality is broken resulting in non-movement of assets. Hotfix for CQ-4272987

Sites

  • pageinfo.json requests are extremely slow and take too long to load. NPR-29709: Hotfix for CQ-4269560
  • onTime or offTime metadata properties saved on assets are not recalled if the AEM server gets restarted. NPR-30413: Hotfix for CQ-4272784
  • Due to incorrect behavior of ConfigPostProcessor class, suspending parent page removes cq: LiveRelationship mixing type from the child page. NPR-30536, NPR-30510: Hotfix for CQ-4254113
  • Cross-site scripting (XSS) on the at Start workflow dialog in Campaign editing page. NPR-29747: Hotfix for CQ-4271067
  • (Classic UI) The Workflow lock stage disables the workflow tab until the lock is released. NPR-30356: Hotfix for CQ-4237557
  • (IE11) When pasting HTML content in a Rich Text Editor component with defaultPasteMode = plaintext, the HTML is pasted with the formatting, hence, defaultPasteMode has no effect. NPR-30045: Hotfix for GRANITE-26094
  • (Classic UI) When the site admin page is reloaded, all dropdown items in the “New” menu are disabled. NPR-29980: Hotfix for CQ-4272044
  • Unable to add styles to the text or edit any existing styles authored on the content. NPR-29712: Hotfix for CQ-4266249
  • (Classic UI) Assets without dc: title value is listed without title in path field dialog browser. NPR-30166: Backport request for CQ-88858
  • The cq: listener does not work with nested components even after adding the parsys component. NPR-30422: Hotfix for CQ-4274863
  • ContextHub error during AEM and Campaign integration. NPR-30625: Hotfix for CQ-4250790
  • The value of the resourceType request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. NPR-29832: Hotfix for CQ-4255365
  • A page refresh is needed after components are copied and pasted from one page to another. NPR-29982: Hotfix for CQ-4256019
  • Publish/Unpublish from a page alias is not supported and should be removed. NPR-30062: Hotfix for CQ-4271249
  • Unclosed ResourceResolver warning in ExperienceFragmentsReplicationListener leading to stability issues over time, forcing to restart AEM instances. NPR-30416: Hotfix for CQ-4257521
  • Moving Experience Fragments that are referenced in more than 150 pages do not modify the fragmentPath in the pages where they are referenced. NPR-30556: Hotfix for CQ-4274900
  • Parsing error when opening a Content Fragment which has characters dollar ($) and open brace ({) one after another. Hotfix for CQ-4270266
  • The VersionPreviewServlet is failing in NullPointerException when trying to display a version of an Experience Fragment in the timeline. NPR-30074: Hotfix for CQ-4271881
  • Unable to lock content fragments via the check-in feature. NPR-29923: Hotfix for CQ-4258785
  • Signature verification failure in SAML authentication handler. NPR-30379: Backport request for GRANITE-26567

Replication

  • JCR Session / Resource Resolver is leaked during OAuth implementation on every replication to MAC / Brand Portal. NPR-30000: Hotfix for Granite-26196

Sling

  • The order of children affected using overlap and order before is causing IndexOutOfBoundException. NPR-30408: Hotfix for Sling-8296 & Sling-7375
  • InactiveBundlesHealthCheck are reading MissingPackagesHealthCheck configuration once the InactiveBundlesHealthCheck configurations are saved. NPR-30084: Hotfix for CQ-4272644

Commerce

  • Unable to run catalog blueprint from Sites console. NPR-29829: Hotfix for CQ-4271461
  • The asset used in the product does not show any reference to the product in the "References’ section of the asset neither the asset path gets updated if the asset is moved. NPR-30542: Hotfix for CQ-4270247

Platform

  • AEM Default Mail Sender is unable to send mail to a remote SMTP server over TLS v1.2. NPR-30476: Hotfix for GRANITE-26605

Communities

  • Groups deleted on the author are not in sync with all the publishers. NPR-29987: Hotfix for CQ-4268738
  • Deleted users removed from the Community Administrators Field are not in sync with the Membership group. NPR-30389: Hotfix for CQ-4274339
  • Users part of the administrators’ group does not have quick links for the group. NPR-30546: Hotfix for CQ-4275579
  • Updating any newly created and existing Community group overwrites the property on jcr: content node and changes their name to first page’s title. NPR-30109: Hotfix for CQ-4273719
  • Quicksearch and search through location and address is not working when the community is set to work with Database Storage Resource Provider (DSRP). NPR-26737: Hotfix for CQ-4258493

Translation

  • Auto-execution of Translation does not work. NPR-30499: Hotfix for CQ-4276288
  • User is able to create language copy on the content path restricted to read-only. NPR-29937: Hotfix for CQ-4270708
  • Translation issue - Only a few components are translated using Machine Translation. NPR-30079: Hotfix for CQ-4273764

Integration

  • The customized content is not displayed correctly on the publish instance until the restart of the instance. NPR-30421: Hotfix for CQ-4273706

Projects

  • dam: folderThumbnailPaths values do not get refreshed and display old thumbnails even after deleting the assets within the folder. NPR-30424: Hotfix for CQ-4273667

UI-Consoles

  • Cross-site scripting (XSS) on Sites page properties on thumbnail tab. NPR-30048: Hotfix for Granite-26200

UI-Foundation

  • Added support for tracking dynamic-UI-states in tracking event in the foundation API. NPR-30742, GRANITE-26322: Hotfix for GRANITE-26036

Forms

NOTE
AEM Service Pack does not include fixes for AEM Forms. They are delivered using a separate Forms add-on package. In addition, a cumulative installer is released that includes fixes for AEM Forms on JEE. For more information, see Install AEM Forms add-on package and Install AEM Forms JEE installer.

Forms add-on package

Adaptive Forms

  • Empty .css file takes longer time to fetch from the publisher, causing performance issue. NPR-30558: Hotfix for CQ-4274399
  • Forms that are modified after publishing do not get posted again on publishing the site. NPR-30411: Hotfix for CQ-4236566

Forms - Backend Integration

  • An error is thrown while creating the Form Data Model with the Web Service Definition Language (WSDL). NPR-30388: Hotfix for CQ-4272921

Forms - Correspondence Management

  • Special characters such as less-than (<), greater-than (>) and ampersand (&) get encoded in the Agent UI. NPR-30410: Hotfix for CQ-4273887
  • When triggering text fragment containing Data Dictionary values, the Agent UI becomes unresponsive. NPR-30098, NPR-30083: Hotfix for CQ-4272204
  • Create Correspondence UI (CCR UI) fails intermittently with error variable (object Object). NPR-29983: Hotfix for CQ-4273874
  • Letter draft reload fails with an exception when the description of Document Fragments contain special characters like less-than (<), greater-than (>) and ampersand (&) in properties. NPR-29930: Hotfix for CQ-4252762

HTML5 Forms

  • When using NonVisual Desktop Access in Browse mode to read an HTML5 form, the Chrome browser reads “graphic” before each Scalable Vector Graphic (SVG) in the form design. NPR-30450: Hotfix for CQ-4274732

Forms JEE installer

Forms - Foundation JEE

  • Adding or editing a Web Service connection by invoking web services from AEM forms Workbench throws an error: ClassNotFoundException org.apache.axis.message.SOAPBodyElement. NPR-30116: Hotfix for CQ-4273217

Forms - Document Services

  • PDF/A label missing error in Acrobat preflight. NPR-30594: Hotfix for CQ-4276032
  • Single character Data Bindings in PDF cause Reader Extensions to fail with an error “java.lang.StringIndexOutOfBoundsException: String index out of range: 1”. NPR-30128: Hotfix for CQ-4273878
  • When a load test is performed on HTML to PDF service, it fails with an error and file type settings are removed from AEM forms server. NPR-30085: Hotfix for CQ-4272631
  • Flattening a PDF with Adobe Acrobat 9.1 (XFA version 3.0) does not retain the PDF form state: Invisible elements on the form are set back to a visible state. NPR-29978: Hotfix for CQ-4270888

Forms - Document Security

  • Applying a signature with timestamp fails with error: ALC-DSC-003-000: com.adobe.idp.dsc.DSCInvocationException: Invocation error. NPR-30696, NPR-30537: Hotfix for CQ-4273778
  • Configuration Manager does not insert Japanese strings for localized table columns. NPR-30496: Hotfix for CQ-4274868

PDFG Service

  • Connection error while trying to convert Word document to PDF on Windows Server 2016. NPR-30597: Hotfix for CQ-4275652
  • Permission denied exception when trying to use the HTML to PDF backend service via the “phantomjs” library. NPR-30456: Hotfix for CQ-4258077
  • maxReuseCount for HTML to PDF service is not shown with JBoss Management Console. NPR-30303, NPR-30135: Hotfix for CQ-4273763

AEM 6.4.5.0

AEM 6.4.5.0 is an important update that includes performance, stability, security and key customer fixes and enhancements released since the general availability of AEM 6.4 in April 2018.

It is also cumulative which means that 6.4.5.0 includes all AEM 6.4 service packs release before it.

Some of the key highlights of AEM 6.4.5.0 are:

  • The built-in repository (Apache Jackrabbit Oak) is updated to version 1.8.13.
  • Added socket timeout and connection timeout in Brand Portal replication agents.
  • Omnisearch enhancements - Increased the pagination limit of the search result to 100 pages.
  • Disabled AssetDownloadServlet OSGi component by default on AEM publish instances. For more information, see Download assets from AEM.
  • Enabled Multi-Site Manager support for Assets. For more information, see Reuse assets using MSM for Assets.

Assets

  • Assets with an apostrophe in the filename do not sync to Dynamic Media. NPR-29538: Hotfix for CQ-4270592
  • Updated DAM DMGateway interface for S3 multipart support. NPR-29740: Hotfix for CQ-4226303
  • The asset download dialog displays an incorrect file size when downloading renditions for a video in Dynamic Media. NPR-29642: Hotfix for CQ-4246202
  • Assets become unusable after Day CQ DAM Mime Type Service applies text for m3u8. NPR-29276: Hotfix for CQ-4264052
  • Asset reference adjustment fails to save the session if any of the moved/renamed assets are part of Sling Resource collections. NPR-29143: Hotfix for /CQ-4252605
  • Cannot track or find assets by searching the metadata values. NPR-29141: Hotfix for CQ-4260215
  • When using the search filter to save a Smart Collection, the click action on the panel does not maintain focus. NPR-29000: Hotfix for CQ-4240323
  • Moving a folder allows the creation of a folder with mixed-case or uppercase names. NPR-28945: Hotfix for CQ-4265234
  • Blank results displayed in Omnisearch if collection name has space. NPR-29001: Hotfix for CQ-4236729
  • Renaming a file using some unsupported special characters like ampersand (&) creates an invalid folder. NPR-29196: Hotfix for CQ-4265037
  • DAM Extract Archive for zip file functionality is broken. NPR-29187: Hotfix for CQ-4254421
  • Metadata import should allow importing metadata without registering namespaces. NPR-29425, NPR-28132: Hotfix for CQ-4269445
  • Saving metadata changes do not work for assets whose name contain a quote character. NPR-29395: Hotfix for CQ-4254305
  • Cannot move a DAM asset if the filename contains whitespace. NPR-29270: Hotfix for CQ-4266403
  • Cannot download ZIP archives compressed with Deflate64 algorithm. NPR-29225: Hotfix for CQ-4253995
  • Asset thumbnails are displayed slowly when opening a folder that contains assets with many versions. NPR-29833: Hotfix for CQ-4271629
  • Unable to enter the collection highlighted if the Enter key is pressed after selecting the collection. NPR-29723: Hotfix for CQ-4261607
  • Cross-site scripting (XSS) attack through the restricted alert window. NPR-29671: Hotfix for CQ-4270133
  • Adding relations to assets is failing for users without delete permissions. NPR-29640: Hotfix for CQ-4269196
  • After adding asset title in the properties page, when the user attempts to close the page, AEM opens the properties page again. NPR-29628: Hotfix for CQ-4264929
  • Creating a large number of relations on asset results in an error. NPR-28779: Hotfix for CQ-4250708
  • Asset ingestion is slow in Scene7 Connect run mode. NPR-28658: Hotfix for CQ-4263007
  • An error Uncaught TypeError: Cannot read property ‘split’ of undefined is displayed when attempting to view the search results. NPR-28803: Hotfix for CQ-4248371
  • The replication from AEM to Brand Portal is stuck for long periods. NPR-28914: Hotfix for CQ-4254932
  • Moving assets in DAM does not result in a similar move on Scene7. NPR-28957: Hotfix for CQ-4264974
  • Metadata updates are not passed to IPS if the metadata field is updated in AEM. NPR-28961: Hotfix for CQ-4255393
  • VersioningTimelineEventProvider should provide root version along with the version comment. Hotfix for GRANITE-26063
  • Injecting data leads to code execution at the server side. Hotfix for CQ-4270246
  • Enabled Multi-Site Manager support for Assets. Hotfix for CQ-4271453, CQ-4268621, CQ-4257491
  • AEM interface should display an additional entry for the current version of the asset in the timeline history, displaying the latest check-in comment from Adobe Asset Link. Hotfix for CQ-4262864
  • The sample video does not load on creating or editing a MixedMediaSet. Hotfix for CQ-4244889
  • Disabling the permissions to delete content on the AEM side prevents the user to publish to Brand Portal. Hotfix for CQ-4270426
  • Query limit related issues with Asset reports after upgrade to AEM 6.4.3. NPR-28588: Hotfix for CQ-4262022, CQ-4260697
  • The download functionality leverages AEM Assets via assetdownload servlet allowing anonymous users to download all assets. NPR-27315, Hotfix for CQ-4254732

Sites

  • JCR complaint tag name should be auto-populated based on tag title. NPR-28990: Hotfix for CQ-4199411
  • Cancel inheritance button is not visible on some of the fields added in the page properties. NPR-29079: Hotfix for CQ-4265686
  • The rollout preview action should not try to recreate the live copy or show it in the rollout pages list. NPR-29151: Hotfix for CQ-4266213
  • (Template Editor) Style Policy regression in structure mode. NPR-28981: Hotfix for CQ-4264400
  • Nested live copies show duplicate entries during rollout. NPR-29300: Hotfix for CQ-4268664
  • Publishing a Live Copy of a Live Copy that contains a Design Importer component fails with Failed to retrieve references for the selected page. NPR-28944: Hotfix for CQ-4265014
  • CoralUI, when used with Multifield, stores the fileReferenceParameter at the component level instead of multifield level. NPR-29536: Hotfix for CQ-4266129
  • The design reference is not replicated on publish after canceling inheritance on Design Importer. NPR-29648, NPR-29721: Hotfix for CQ-4269270, CQ-4271087
  • The path field in Rich Text Editor opens at the root path irrespective of the path specified to search. NPR-29483: Hotfix for CQ-4268997
  • (IE11) Copy paste HTML content in a RTE component with defaultPasteMode = plaintext does not paste the content as a plain text. NPR-29432, NPR-29171: Hotfix for GRANITE-24941
  • Rich Text Editor spellcheck no longer works in other languages. NPR-29506: Hotfix for CQ-4264990
  • Cross-site scripting (XSS) on the Campaign page. NPR-29614: Hotfix for CQ-4269322
  • Minimizing Rich Text Editor from fullscreen while in source edit mode leads to loss of content. NPR-29574: Hotfix for CQ-4260584
  • (Classic UI) Navigating to the last tab is not always possible when a large number of tags exist. NPR-29544: Hotfix for CQ-4264548
  • (Classic UI) Admin Console navigation menu disappears, and the page does not load completely. NPR-29571: Hotfix for CQ-4264585
  • Error alert is generated when adding components to WCM page when minification is enabled on the instance. NPR-29396: Hotfix for CQ-4266196
  • An issue with the inheritance of Style System nodes from the parent. NPR-29296: Hotfix for CQ-4266041
  • Page restored with Timewarp should refer to the correct picture at the time of versioning. NPR-29431: Hotfix for CQ-4262638
  • Blank page with Javascript errors on editor after installing latest 6.4.5 snapshot version. NPR-29475: Hotfix for CQ-4266196
  • While adding a component to a parsys, design component list property is not respected and is resolved to a different template node name with a similar parsys structure. NPR-29509: Hotfix for CQ-4269044
  • cq:dropTargets zone covers the whole component instead of the size of the image, making targeting difficult with embedded components. NPR-29738: Hotfix for CQ-4268912
  • The image component does not call the “afteredit” listener after the image in-place editor is used. NPR-29616 Hotfix for CQ-4268065
  • An issue in setting up the social posting to Facebook. NPR-29212: Hotfix for CQ-4266630
  • When promoting launches for modified pages, modifications in both the source and launch branches are considered. NPR-29308: Hotfix for CQ-4266746
  • The rendered thumbnail on Content Fragment shows internal calendar representation for Date and Time field. NPR-29531: Hotfix for CQ-4269362
  • Cannot bulk add a tag to pages with existing different tags. NPR-28729: Hotfix for CQ-4262922
  • Scheduled Activation icon is not showing in the site admin. NPR-28725: Hotfix for CQ-4263917

Replication

  • Sensitive information disclosure vulnerability in Replication Agent component. NPR-29612, NPR-24951: Hotfix for GRANITE-25070
  • User-provided data is not escaped on output in the cq/replication/components/agent component, resulting in a stored Cross-site scripting (XSS) vulnerability. Hotfix for CQ-4266263

Experience Fragments

  • Cannot export Experience Fragments to target when smart image is used. Hotfix for CQ-4269606

Social - Reporting

  • AEM Community reports do not show in AEM author instance. Hotfix for CQ-4266294

Platform

  • Cross-site scripting (XSS) in package manager while installing a package. NPR-29734, NPR-29713, NPR-29630: Hotfix for GRANITE-26161, GRANITE-
  • Multiple stored and reflected Cross-site scripting (XSS) in CRXDE Lite. NPR-29634: Hotfix for GRANITE-26049
  • Login functionality for Package Share uses GET request rather than POST request, causing the password to be visible under the network tab. NPR-29631: Hotfix for GRANITE-26048

Felix

  • Cross-site scripting (XSS) observed in system console. The page gets loaded and pop up comes over when mouse is hovered over text field. NPR-29853, NPR-29633: Hotfix for GRANITE-26188, GRANITE-26050

Granite

  • Apache Sling Logging Logger Configuration does not filter the injected script. NPR-29775: Hotfix for GRANITE-26051

Communities

  • Groups deleted on author should be removed from the publish instances. NPR-28933: Hotfix for CQ-4264645
  • App secret should be protected with a password field, not to be displayed in plain text for social connect tools. NPR-29728: Hotfix for CQ-4270480
  • Visitors and members, with no moderator privileges, can see unapproved/pending posts by pasting the URL. NPR-29726: Hotfix for CQ-4271124, CQ-4271441
  • High response time up to 40-50 seconds is observed on user sign-in for Community. NPR-29678: Hotfix for CQ-4269444

Translation

  • Users without translation feature access on navigation should not be able to access its subpages. NPR-29644: Hotfix for CQ-4269979
  • User permissions not upheld as wizard allows the creation of the translation copy in a read-only location. NPR-29375: Hotfix for CQ-4265877

UI - Foundation

  • Increased the pagination limit of the search result to 100 pages for card view and 200 for the list view. NPR-29332: Hotfix for GRANITE-24644
  • Due to lazy loading of tags, nothing is displayed on the collection page. NPR-29267: Hotfix for GRANITE-24902
  • Changing the pagination limit to 100 instead of 40 triggers an extra lazy load without pagination request. NPR-29246: Hotfix for GRANITE-25027
  • AEM granite password field is not getting populated after encryption. NPR-29245: Hotfix for GRANITE-24908

Integration

  • An exception message is shown when trying to edit and save the AEM launch configuration. NPR-29086: Hotfix for CQ-4266153
  • BrightEdge credentials fail with connection error. NPR-29167: Hotfix for CQ-4265872
  • The inherited from checkbox appearing at the root level in Cloud Service Configs should be removed. NPR-27856: Hotfix for CQ-4259676

Sling

  • HTTP connection timeout is not being read from the configurations. NPR-29264: Hotfix for SLING-7902
  • JCR installer writeback causes the OSGi configuration to use invalid format and block the redeployment. NPR-29027: Hotfix for CQ-4264694

Projects

  • Users are unable to complete the project workflow. NPR-29621: Hotfix for CQ-4258791
  • Project Workflow list shows empty rows beyond 40 workflows. NPR-28739: Hotfix for CQ-4264005
  • Choosing Dynamic Rendition option in Brand Portal downloads an empty .zip file. NPR-29420: Hotfix for CQ-4268826
  • Publish Assets from AEM Author /content/dam/mac folder to Brand Portal doesn’t work. NPR-29820: Hotfix for CQ-4271118
  • Punctuation in the name causes issues with publish button. NPR-29573: Hotfix for CQ-4269317
  • Unable to create asset language copy through reference panel. Hotfix for CQ-4269535

Workflow

  • Upgrade from 6.4.2 to 6.4.4 breaks the dialog participant’s calendar picker field. NPR-29727: Hotfix for CQ-4270423

WCM - Admin UI

  • Opening the permissions tab in Coral2 implementation do not show the buttons. Hotfix for CQ-4269419

WCM - MSM

  • Deleting a child node in the live copy should detach the liveRelationship. Hotfix for CQ-4270395
  • Upgrade to AEM 6.4.3 makes Multi-Site Manager take a long time to roll out. Hotfix for CQ-4271410

Vulnerability

  • CSRF protection framework is not working with AEM foundation forms. NPR-28612: Hotfix for GRANITE-22231

WCM - Page Editor

  • Reflected Cross-site scripting (XSS) when using an invalid selector. Hotfix for CQ-4270397

Forms

The key highlights for AEM 6.4.5.0 forms are:

Forms add-on package

Adaptive Forms

  • (Touch UI) Start workflow option does not pop up the dialog box for configuration. NPR-29521: Hotfix for CQ-4269050

Forms - Backend Integration

  • Enabled support for Active Directory Federation Services (ADFS) v3.0 for Microsoft Dynamics on-premise integration. NPR-30003, NPR-29484: Hotfix for CQ-4270586
  • Prefill service fails due to prolonged turnaround time from AEM Forms Data Integration module. NPR-28997: Hotfix for CQ-4265988
  • SOAP Webservice request is malformed within AEM Forms. NPR-29013: Hotfix for CQ-4265443
  • No error message is displayed while testing SOAP service, in case of an incorrect date value. Hotfix for CQ-4265445

Forms - Interactive Communication & Forms - Correspondence Management

  • Create Correspondence UI (CCR UI) fails to handle a float number. NPR-29210: Hotfix for CQ-4254201
  • The tooltip set on a variable is not visible on the Create Correspondence UI (CCR UI). NPR-29739: Hotfix for CQ-4250533
  • Unable to copy or paste from Omnisearch within letters. NPR-29808: Hotfix for CQ-4270783

HTML5 Forms

  • When we add a space within the text, the text field does not allow to fill to the end. NPR-28844: Hotfix for CQ-4260239

Forms JEE installer

Forms - Foundation JEE

  • Webservice component in AEM Forms Workbench is unable to invoke a web service, which requires two-way SSL authentication. NPR-29485: Hotfix for CQ-4246794
  • AEM Forms JEE configuration manager does not work with multiple NIC cards. NPR-29236: Hotfix for CQ-4268598
  • AEM startup error coming from GemFire: java.lang.IllegalStateException: Only one AdminDistributedSystem connection can be made all at once. NPR-29524: Hotfix for CQ-4266295
  • NoClassDefFoundError because of jar version mismatch. NPR-28834: Hotfix for NPR-28834

Forms - Document Services

  • Invalid PDF/A file is reported as valid PDF/A using isPDFA operation. NPR-29076: Hotfix for CQ-4261541
  • PDF fails conversion to PDF/A-1b with Form field does not have appearance dict. NPR-29534: Hotfix for CQ-4269618
  • PDF/A conversion from PDF produced with the Output Service does not pass validation with Acrobat DC. NPR-29647: Hotfix for CQ-4270448
  • Apache POI bundle fails with an exception. NPR-27861, NPR-28048: Hotfix for CQ-4245898, CQ-4244778

Forms - Designer

  • Added PDF/UA support to XML Forms Architecture (XFA) forms generated using Designer and Output Service. NPR-23022

Forms - Workflow

  • Submissions from workspace fail with Umlaut character. NPR-29087: Hotfix for CQ-4263172

Feature Packs Included

Assets

OSGI bundles and content packages included

The following text documents the list of OSGI bundles and content packages included in the CFP.

List of OSGi bundles included in AEM 6.4.5.0

Get File

List of Content Packages included in AEM 6.4.5.0

Get File