# Orbeon Forms 2018.2.5

**Friday, December 17, 2021**

Today we released Orbeon Forms 2018.2.5 PE. This maintenance release contains security updates and bug-fixes and is recommended for all users of:

* [Orbeon Forms 2018.2.4 PE](https://doc.orbeon.com/release-notes/orbeon-forms-2018.2.4)
* [Orbeon Forms 2018.2.3 PE](https://blog.orbeon.com/2019/05/orbeon-forms-201823-pe.html)
* [Orbeon Forms 2018.2.2 PE](https://blog.orbeon.com/2019/03/orbeon-forms-201822-pe.html)
* [Orbeon Forms 2018.2.1 PE](https://blog.orbeon.com/2019/02/orbeon-forms-201821-pe.html)
* [Orbeon Forms 2018.2 PE](https://blog.orbeon.com/2018/12/orbeon-forms-20182.html)

This release addresses the following issues since [Orbeon Forms 2018.2.3 PE](https://blog.orbeon.com/2019/05/orbeon-forms-201823-pe.html):

* Upgrade to log4j 2.x ([#4373](https://github.com/orbeon/orbeon-forms/issues/4373))
* Explicit validation is not triggered when navigating to review page ([#4287](https://github.com/orbeon/orbeon-forms/issues/4287))
* Excel import: exception when validating data ([#4408](https://github.com/orbeon/orbeon-forms/issues/4408))
* Modal button spinner disappears upon click with `replace="all"` ([#4511](https://github.com/orbeon/orbeon-forms/issues/4511))
* `javascript-lifecycle`'s `destroy()` is not called as expected ([#4541](https://github.com/orbeon/orbeon-forms/issues/4541))
* Deadlock in MySQL ([#4706](https://github.com/orbeon/orbeon-forms/issues/4706))
* Use DOM serialization directly ([#4093](https://github.com/orbeon/orbeon-forms/issues/4093))
* Third-party library upgrades

For more on the Log4j vulnerability issue, see our [blog post](https://blog.orbeon.com/2021/12/vulnerability-in-log4j-library.html).

UPDATES:

* 2018.2.5.1 upgrades Log4j to version 2.17.1 to address the latest vulnerabilities

You can download the latest version of Orbeon Forms from the [downloads](https://www.orbeon.com/download) page.

Don't forget to [grab a trial license](https://prod.orbeon.com/prod/fr/orbeon/register/new) for the PE version.

Please send feedback via [Twitter](https://twitter.com/orbeon), [Bluesky](https://bsky.app/profile/orbeon.bsky.social), or the [forum](https://groups.google.com/g/orbeon).

We hope you enjoy this release!