JS7 JobScheduler Version 2.7.9 released

We are pleased to announce the 2.7.9 Long Term Support maintenance release of the JS7 JobScheduler

The release brings a number of bug-fixes and features to the JobScheduler Controller, Agent and JOC Cockpit. JobScheduler is rebranded to JS7 JobScheduler to indicate major changes to architecture and features.

Maintenance releases in LTS branch 2.7 are available to subscribers of Long Term Support. The next LTS branch with public maintenance releases is branch 2.8 available since July 2025.

JS7 is the next generation Open Source Job Scheduler designed for performance, resilience and security.

Getting Started

• The JS7 Online Demo is available for immediate access.
• Consider the Getting Started section of the Product Knowledge Base.

Release

• Release Notes
  • Release 2.7.9
• Features (major)
  • JOC-2290: Switch the default value of the "remember me" setting to false
• Bug-fixes (major)
  • JOC-2238: No limit on the number of concurrent OIDC sessions
  • JOC-2228: Daily Plan is closed too early for time zones later than UTC 

3rd-Party Vulnerability Remediation

• JOC-2254: Update Jetty from 11.0.26 to 12.1.10 due to multiple 3rd party vulnerabilities
• JOC-2256: Upgrade log4j-core to version 2.26.1 due to 3rd-party vulnerability CVE-2025-68161
• JOC-2268: org.eclipse.parsson version 1.1.7 flagged with 3rd Party Vulnerability issue CVE-2026-9563
• JOC-2266: Upgrade PostgreSQL Driver to version 42.7.12 due to 3rd party vulnerability CVE-2026-54291
• JOC-2264: Upgrade jackson-databind 2.22.0 to 2.22.1 due to 3rdparty vulnerability CVE-2026-59889
• JOC-2258: Upgrade 3rd Party Javascript dependencies of JOC Cockpit due to multiple Vulnerabilities
• JOC-2245: Upgrade jackson-databind 2.21.1 to 2.22.0 due to multiple 3rd party vulnerabilities CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518, CVE-2026-50193
• JOC-2289: Upgrade jackson-databind to version 2.22.2 due to 3rd party vulnerabilities CVE-2026-19032 and CVE-2026-68497
• JOC-2299: Upgrade MariaDB JDBC Driver to version 3.5.9 due to multiple 3rd-party Vulnerabilities
• JOC-2309: Upgrade jackson-databind 2.20.0 to 2.22.3 due to 3rd party vulnerabilities CVE-2026-89407, CVE-2026-89425, CVE-2026-91777
• JOC-2257: Upgrade 3rd Party Javascript dependencies of JOC Cockpit due to multiple Vulnerabilities

Important

• Branch 1.13 of JobScheduler reached its end-of-life in August 2023.
• Users of JobScheduler branches 1.x should consider changes and migration tools being available to upgrade to JS7.
• Please also take note of our Change Management information.

Download the JS7 JobScheduler

• SourceForge
• SOS Berlin