Version 25.7 Release Notes

This subrelease introduces various adjustments across multiple apps to further optimize the application. Alongside numerous bug fixes, we have improved existing functionalities and integrated new features to increase stability, performance, and the overall user experience.

In response to a publicly disclosed critical security vulnerability in the widely used libssh2 library, we have immediately integrated protective measures into EPOS. Under certain circumstances, this vulnerability allows attackers to inject malicious code via manipulated SSH connections. (Source: Kritische libssh2-Lücke: Proof-of-Concept-Exploit veröffentlicht | heise online)

Since a functional exploit is already publicly available, we have proactively incorporated the official fixes from the libssh2 developers into EPOS to protect our users as quickly as possible: backported upstream libssh2 fixes to mitigate CVE-2025-15661, CVE-2026-55199, CVE-2026-55200, CVE-2026-7598.

- Support for certificate enrollment in the JAVA environment.

- New rollout mode: 'Create new PSE'.

Additional variables are now available to allow for more customized emails (e.g., SID_LIST, APPNAME), along with a new timezone-dependent variable for schedule dates (e.g., SCHEDULEDATE_UTC).

A display based on Destination Usage is now available, alongside a cumulative view of App Usage.

With the new KERNELCPMODE option, you can configure how kernel files are distributed to the EXE directories of the instances.

- Introduced an option to automatically clean up the remote staging directory.

- Added support for installing LSS during upgrades to SPS8+ via an opt-in parameter.

- Added an option to wait during database startup until the preloading of SAP HANA tables is complete.

We recommend all users update to this version to benefit from the latest improvements and bug fixes.