DataFlex 2024/24.0 and 2023/23.0 Security update - Action required!

Updates for DataFlex 2024/24.0 and 2023/23.0 are now available, providing key fixes for the DataFlex WebApp Server and Studio Framework packages. To ensure optimal performance and stability, it is recommended that you apply these updates to your production environments by upgrading DataFlex Studio, updating the WebApp Server, and recompiling your web applications.

The update includes:

• Fixed Leaking handles in WebApp Server in the process pool logic.
• Fixed a Security issue in the DataFlex WebApp Framework.
• (DF24.0) Fixed a SPLF license check issue causing one WebApp less to be allowed than the license permits.

As this release includes a security patch and some fixes improve the stability of your web applications, it is strongly recommended to upgrade as soon as possible.

Steps to take

As this release fixes multiple components of DataFlex and its Framework, it is required to update both your development (DataFlex Studio) as well as production deployment environments (DataFlex WebApp Server).

How to:

1. Install the latest Studio for your DataFlex version using the links below.
2. Install the latest WebApp Server on your production environments for your DataFlex version.
3. Recompile your Web Applications using the latest DataFlex packages.
4. Deploy your recompiled application to your production sites.

How to update DataFlex Studio(s) & WebApp Server(s):

With this post we release new versions of DataFlex Studio and WebApp Server versions, being:

• DataFlex 24.0 (Click the ’Download Latest Version’ button to access the correct version)
  • DataFlex Studio 
  • DataFlex WebApp Server
• DataFlex 23.0 (Click the download button next to version 23.0 to get the correct version)
  • DataFlex Studio
  • DataFlex WebApp Server

To install the new version(s):

• First uninstall the current DataFlex WebApp Server version.
• Download & Install the latest DataFlex WebApp Server version.
• First uninstall the current DataFlex Studio version.
• Download & Install the latest DataFlex Studio version.
• After opening a workspace, a migration of the JavaScript engine shows. If that is not suggested go to Tools -> Update JavaSCript Engine. Click yes.
• Recompile your application. If a rebuilt is not triggered go to Project -> Recompile “{Project Name}”.
• Deploy your application using the newly installed DataFlex WebApp Server.

Security reminder

Please note that it is recommended to use recent and supported DataFlex version(s). Especially in web environments security updates are important. Look at the Current Products List for the officially supported DataFlex versions and platforms.

For further discussion, visit the DataFlex Web & Mobile Applications forum.