Release Notes for OpenCms 8.5.2

July 10, 2013

OpenCms 8.5.2 is an important update that fixes several issues that persisted in the 8.5.1 release. This version also contains security improvements against XSS attacks.

Please note: This version of OpenCms requires Java 6 because of library dependencies.

Main improvements in OpenCms 8.5.2

  • Improved IE10 compatibility.
  • Improved lock behaviour for group editor.
  • Improved offline indexing to index content changes immediately.
  • Improved PDF extraction with new library version.
  • Improved module import by pausing offline indexing while importing or deleting modules.
  • Improved purging of container pages after publish.
  • Updated CodeMirror source code editor to version 3.14.
  • Updated commons DBCP library.

Fixed issues in OpenCms 8.5.2

  • Fixed issue #50 with encoding links in pointer resources.
  • Fixed issue #114 with locale handling on embedded message bundles in schemas.
  • Fixed issue #152 where the layout of the VfsImageWidget was broken.
  • Fixed issue #155 where error messages where not displayed correctly.
  • Fixed issue #156 where newly created container pages from model pages did not have the right template property.
  • Fixed issue #159 where another resource was locked when creating a new one.
  • Fixed issue #167 where editing expired resources from direct edit caused errors.
  • Fixed issue #169 where SOLR rebuild doesn't update unmodified resources.
  • Fixed issue #170 where folders without default files did deliver a blank page instead of the 404 error code.
  • Fixed issue #173 where XSS was possible.
  • Fixed issue #175 where depending on the current date certain dates could not be set.
  • Fixed issue with possible XSS exploit using the CmsRequestUtil.
  • Fixed issue with element language select.
  • Fixed issue with in-line editing of choice attributes.
  • Fixed issue when saving a container page that contained inconsistent links.
  • Fixed issue where expired resources were not availably using the gallery select dialogs.
  • Fixed issue where head includes for elements did not work, if the element was part of an inheritance group.
  • Fixed issue with history view for no longer existing historic resource versions.
  • Fixed issue with publishing moved resources with categories.
  • Fixed issue with selecting "Undo changes" in the context menu for a JSP.
  • Fixed issue with context menu for expired resources.
  • Fixed issue with determining the content CSS in the XML content editor.
  • Fixed issue with memory leak related to GWT RPC services.
  • Fixed issue with memory leaks using SOLR.

Features of OpenCms in general

  • The page editor allows to create and arrange content on web pages by drag & drop.
  • The sitemap editor allows to create new pages and re-arrange the navigation tree by drag & drop.
  • Support for creation of content for mobile devices with the <cms:mobile> tag.
  • Structured contents can be defined using a simple XML schema.
  • Editors with WYSIWYG and syntax highlighting functionality.
  • Easy to use "Online / Offline" workflow, changes must be approved before they become visible.
  • Link management for all internal resources with broken link detection.
  • Integrated image scaling and cropping.
  • Full featured internal user management that supports the concept of "Organizational Units" (OUs).
  • Allows management of multiple websites within one installation.
  • Contents can be served dynamically or exported to static HTML files.
  • Extensions can be added through a flexible module system.
  • Full text search for web pages, but also in PDF, MS Office documents etc.
  • The "time warp" feature allows to view resources which are expired or not yet released.
  • JSP integration for dynamic functionality in templates, dynamic forms etc.
  • ... and many more

Backward compatibility

We recommend everyone who uses OpenCms to update to this 8.5.2 release.

OpenCms 8.5.2 is fully backward compatible to all prior 8.x and 7.x versions. Templates and other OpenCms developed code from these versions should work "out of the box" with version 8.5.1.

Notice for users of Alkacon OCEE: OpenCms version 8.5.2 requires Alkacon OCEE version 3.5.2 or later. In case you want to update your OpenCms installation to 8.5.2, please make sure you update Alkacon OCEE to 3.5.2 or later first!

Compatibility with Java versions, Servlet containers and Databases

Please note: OpenCms version 8.5.2 requires Java 6 because of library dependencies. 

OpenCms 8.5.2 has been written and tested for Java 6 and 7. We have tested only with ORACLEs version of the JDK. However, OpenCms has no dependencies to sun.* packages so it should in theory run with all compliant JVMs.

We have tested this release on the Tomcat servlet engine. OpenCms works "out of the box" with Tomcat 7, which we recommend. Others have reported deploying OpenCms successfully on other servlet containers like JBoss, BEA, Websphere, Glassfish and Resin Professional.

On the database side, we have tested with MySQL, Oracle, PostgreSQL, MS SQL Server, DB2 and HSQLDB. The automatic update wizard for OpenCms 8.5.2 supports MySQL, Oracle and PostgreSQL.

Regarding version numbers and build tags

In case you want to check out OpenCms from Git, please keep the following in mind: The tag numbers for all OpenCms 8.5 final releases are "build_8_5_x", so the 8.5.2 release is tagged "build_8_5_2".

The main OpenCms Git repository is available on Github at

How you can help

Contributions to the OpenCms core development are most welcome. Please send us your pull requests directly on GitHub.

Please use our issue tracker on GitHub to report bugs in this release:


Thank you for using OpenCms and have fun with OpenCms 8.5 :-)

Back to the news overview

Download OpenCms

  • OpenCms 17 gives content managers the new app "Date search" to find content that has been changed in a certain time range. The "Websites" app allows to easily export the content of a complete site for archiving. An option has been added to hide "sensitive" content in the Offline project. The default Mercury template has been further improved, e.g. with SEO optimized job postings, a "spacer" function and marker clusters for maps. OpenCms 17 has also been tested and certified using Java 17 LTS and 21 LTS.

    Click here to download

Try the OpenCms Live Demo

Alkacon OCEE

  • Alkacon Software - The OpenCms Experts

    The Alkacon OpenCms Enterprise Extensions (also called OCEE) are a commercial extension for OpenCms. Alkacon OCEE adds features to OpenCms that are often required for running OpenCms in a medium or large Enterprise, where data consistency, security and failover are highly important.

    Learn more...