Sunflower (R1 2025) Post-Release Hotfixes
The Sunflower support period ends Jun 30, 2026. Plan to migrate to the Trillium release by this date. No post-release hotfixes (critical service patches/CSPs) for security vulnerabilities in the Sunflower release will be provided after that date. Support policy
- Sunflower (R1 2025) Critical Service Patch #1 - Modules release deadline: Aug 29 | GA date: Sept 25
- Sunflower (R1 2025) Critical Service Patch #2 - Modules release deadline: Oct 16 | GA date: Oct 27
- Sunflower (R1 2025) Critical Service Patch #3 - Modules release deadline: Nov 13 | GA date: Nov 25
- Sunflower (R1 2025) Critical Service Patch #4 - Modules release deadline: Dec 11 | GA date: Dec 22
Sunflower CSP#1: See Sunflower+R1+2025+Modules+deployment+changes for mod-users-bl EUREKA_LOGIN_PERMS environment variable. (MODUSERBL-224)
For Okapi-based installations using SSO (Single Sign On with mod-login-saml): mod-login-saml 2.10.1 has increased the maximumAuthenticationLifetime from 5 to 8 hours (MODLOGSAML-208). This breaking change in the Single Sign On (SSO) login lifetime will likely violate the security policy of some institutions, in this case downgrade to mod-login-saml 2.10.0.