BIOVIA Support often get questions related to security updates of third-party components used in Pipeline Pilot.
For each release, these third-party updates are listed in the Product Release Document (PRD) for that release.
Below is a list of third party updates for the recent Pipeline Pilot releases compiled from the respective PRD.
Pipeline Pilot 2023
- The embedded Tomcat server has been updated to the latest security-fix version.
- Updated the Apache httpd server to version 2.4.54.
- Updated OpenSSL to the latest 1.1.1 version.
- The Java logging library reload4j is updated to the latest version 1.2.22.
Pipeline Pilot 2023 SP1
- The embedded Tomcat server has been updated to the latest security-fix version.
Pipeline Pilot 2024
- The Java run time environment included with Pipeline Pilot is upgraded to Temurin-11.0.20+8.
- Apache is updated to version 2.4.57. Also, the httpd dependency apr is updated to version 1.7.3.
- Python is updated to version 3.9.16.
- The Perl installation used for the Perl (on Server) component is updated to Perl 5.36.0.
- The ODBC drivers for Oracle, SQLServer, and MySQL are updated: Oracle is 8.00.02.2713, SQL Server is 8.00.02.1196, and MySQL is 8.00.02.218.
- Chromium Embedded is updated to the latest version as of September 2023.
- libssh is updated to the latest available version, 0.10.4.
- The internal SQLite driver used for various tasks within Pipeline Pilot is updated to the latest version.
- OpenSSL is updated to the latest 3.0 release as of September 2023.
- The lz4 compression library is updated to the latest version as of September 2023.
Pipeline Pilot 2024 SP1
- The Brotli compression library is updated to 1.1.0.
- libssh is updated to version 0.10.6.
- Openssl is updated to 3.0.13.
- The zlib library is updated to the latest available version (1.3.1).
- The expat XML parser library is updated to the latest available version (2.6.0).
- The Active MQ client library is updated to version 5.18.3.
- The embedded Tomcat server is updated from Tomcat 8.5 to Tomcat 9.0.83.
- Perl, which is primarily used by the Perl (on server) components, is updated to 5.36.3.
- Apache httpd is updated to 2.4.58.
Pipeline Pilot 2025
- The expat XML parser library is updated to the latest available version (2.6.2).
- The lz4 compression library is updated to the latest version as of July 2024.
- The internal SQLite drive is now the latest version.
- The libssh was updated to the latest available version.
- The version of Openssl was updated to 3.0.15.
- The expat XML parser library is updated to the latest available version (2.6.3).
- The Highcharts library has been updated to version 11.4.8.
- The embedded Tomcat server is updated to version 9.0.95
- The Java runtime environment included with Pipeline Pilot is upgraded to Java 17.
- Python has been updated to version 3.9.19
- The Apache httpd server is updated to version 2.4.61.
Pipeline Pilot 2025 SP1
- Openssl is updated to version 3.0.16.
- The SQLite library is updated to version 3.49.1.
- The expat XML parser library is updated to the latest available version (2.7.1).
- Python is updated to version 3.10.16. In addition, the Python essentials library now includes: numpy-1.26.4, pandas-2.2.3, bottleneck-1.3.6, scipy-1.15.0, matplotlib-3.10.0, scikit-learn-1.6.0.
- The embedded Tomcat server is updated to version 9.0.102.
- The Java SDK included with Pipeline Pilot is updated to version 17.0.5.
- Chromium Embedded is updated to the latest version as of March 2025.
- The Apache httpd server is updated to version 2.4.63.
Pipeline Pilot 2026
- The Apache httpd server is updated to version 2.4.65.
- The SQLite library is now the latest version 3.50.4.
- The libssh is updated to the latest available version 0.11.3.
- The expat XML parser library is updated to the latest available version (2.7.3).
- OpenSSL is updated to version 3.5.4.
- The embedded Tomcat server is updated to version 9.0.107.
- The Java SDK included with Pipeline Pilot is updated to version 17.0.16.
- The older and unsupported 7.1 DataDirect ODBC drivers have been removed from the Pipeline Pilot 2026 release. In addition, the 8.x DataDirect ODBC drivers have been updated to the latest available version. Note that the Windows drivers require the Microsoft Visual C++ Redistributable version to be at least 14.40.33810.
- Chromium Embedded is updated to the latest version as of August 2025.
- Python is updated to version 3.12.11. The Python modules in the Essentials library are updated to the following versions: numpy: 2.3.0, pandas: 2.3.1, bottleneck: 1.5.0, scipy: 1.16.0, matplotlib: 3.10.0, scikit-learn: 1.7.0, scikit-optimize: 0.10.2.
- The Perl installation used for the Perl (on Server) component is updated to Perl 5.40.2.
- The Velocity library used by the HTML Template component is updated to 2.4.1.
