Customer/partner information regarding security vulnerabilities in PHP. Read more ->
Nexus Documentation

Release notes Digital Access component 6.14.2

Release date: 2026-10-29

Database backup recommended before upgrade:
This release introduces schema changes (OAuth 2.0 JWT access-token support and widened id_token columns for ML-DSA-signed tokens).

Also, if upgrading from a version below 6.13.0, password hashing will be carried out which also strongly suggests database backup of the databases. Rollback requires restoring the pre-upgrade database state.

Oracle-specific note:
id_token column widening is performed by dropping/recreating the column (Oracle does not support in-place conversion for this case). Existing id_token values are intentionally not preserved. These values are short-lived/single-use, so practical impact is limited to users mid-login during upgrade.

TLS protocol changes:
TLS 1.0/1.1 options were removed from Access Point inbound TLS configuration and admin UI. Existing TLS 1.0/1.1 settings are removed on upgrade. Validate legacy-client compatibility before enforcing quantum-safe TLS posture.

Improvements

Jira ticket number

Description

DA-2986

Security patches in third-party libraries.




Last updated: