7.9.11 Release Notes - Enterprise Java Content management system - Hippo CMS

7.9.11 Release Notes

January 29, 2016

The new maintenance release 7.9.11 is available for general use. This release includes bug fixes and improvements in core, enterprise and plugins. This release also includes XSS and XXE vulnerabilities fixes.  To know the changed artifacts, refer the section Artifacts version and below JIRA links. For Hippo Enterprise Customers and Partners new Upgrade Verifier from CMS 7.8.12 to 7.9.11 is available.
Please upgrade your project to this latest maintenance release, see the minor upgrade instructions for more information.

New projects can be bootstrapped using new essentials, to start follow trails page.

The new versions of these module artifacts have been made available earlier and are now bundled up in this maintenance release. If the project already has been using these newer artifact versions via a project pom file override, then remove these artifact version overrides when upgrading to a newer maintenance release.

We encourage all projects to remain on the regular maintenance release. Using a tagged artifact that is not yet part of a maintenance release should only be done if there is a specific reason and only after testing in your specific project setup.

ARTIFACTS & VERSIONS in 7.9.11

CORE

Addon HST Config Editor 1.13.05
Addon Channel Manager 2.26.11*
Addon Search Service 1.03.00
Commons 1.04.02
CMS 2.26.25*
Hippo theme 1.01.05
HST 2.28.14
Packages 2.26.00
Repository 2.26.20*
Services 1.04.03
Utilities 1.03.01
Project 26.8

FORGE

Content Blocks 1.11.05
Dashboard Document Wizard 1.05.04
ECM Tagging 4.07.04
Gallerypicker 1.13.04
HST SEO Support 1.01.00
Poll 1.08.02
Relateddocs 2.10.01
Robotstxt 1.08.01
Resource bundle 1.02.05
Selection 2.08.04
Sitemap 1.06.03
Taxonomy 1.11.06
TCMP 1.09.00

Enterprise

Addon Reporting 1.08.01
Addon Targeting 2.26.04*
Addon Edition Indicator 1.03.01
Addon Advanced Search 1.04.06*
Addon Eforms 1.03.14*
Addon Replication 2.26.04
Addon Synchronization 2.26.01

Dependencies

Jackrabbit 2.6.5

(*) - New artifact versions

Improvement

CMS

  • [CMS-9787] - [Backport to 7.9] Show new-folder icon for custom workflow actions that add a folder

REPOSITORY

  • [REPO-1405] - [Backport 7.9] No need to support DTD or XML validating in SystemViewXML

ENTERPRISE FORMS

  • [EFORMS-349] - Backport to 7.9 - translate labels of form export for NL

Bug

REPOSITORY

  • [REPO-1410] - [7.9] Code to prevent multiple same-state variants from being created can cause database inconsistencies

TARGETING

  • [BT-895] - [backport 7.9] Targeting - regression - when editing a persona's preview criteria, the screen does not scroll
  • [BT-1382] - [Backport to 7.9] Improve rendering of persona and target group names

ADVANCED SEARCH

  • [ENT-877] - [backport 7.9] Inconsistent results between Search and Advanced Search

ENTERPRISE FORMS

  • [EFORMS-334] - Backport to 7.9: getSubmissionCount in StoreCounterStrategy not working when node name starts with digits
  • [EFORMS-335] - Backport to 7.9: Actual store count not working when node name starts with digits
  • [EFORMS-340] - Counter node in FormCounterExtension not found
  • [EFORMS-357] - Bckport 331 to 7.9: XSS vulnerability in Eforms radiogroup/checkbox fields
  • [EFORMS-360] - Backport 347 to 7.9: Eforms has several XPath queries that does not escape path and query value properly

TASK

CMS

  • [CMS-9796] - Update copyright year on login screen to 2016

7.9.11 Release Notes

January 29, 2016

The new maintenance release 7.9.11 is available for general use. This release includes bug fixes and improvements in core, enterprise and plugins. This release also includes XSS and XXE vulnerabilities fixes.  To know the changed artifacts, refer the section Artifacts version and below JIRA links. For Hippo Enterprise Customers and Partners new Upgrade Verifier from CMS 7.8.12 to 7.9.11 is available.
Please upgrade your project to this latest maintenance release, see the minor upgrade instructions for more information.

New projects can be bootstrapped using new essentials, to start follow trails page.

The new versions of these module artifacts have been made available earlier and are now bundled up in this maintenance release. If the project already has been using these newer artifact versions via a project pom file override, then remove these artifact version overrides when upgrading to a newer maintenance release.

We encourage all projects to remain on the regular maintenance release. Using a tagged artifact that is not yet part of a maintenance release should only be done if there is a specific reason and only after testing in your specific project setup.

ARTIFACTS & VERSIONS in 7.9.11

CORE

Addon HST Config Editor 1.13.05
Addon Channel Manager 2.26.11*
Addon Search Service 1.03.00
Commons 1.04.02
CMS 2.26.25*
Hippo theme 1.01.05
HST 2.28.14
Packages 2.26.00
Repository 2.26.20*
Services 1.04.03
Utilities 1.03.01
Project 26.8

FORGE

Content Blocks 1.11.05
Dashboard Document Wizard 1.05.04
ECM Tagging 4.07.04
Gallerypicker 1.13.04
HST SEO Support 1.01.00
Poll 1.08.02
Relateddocs 2.10.01
Robotstxt 1.08.01
Resource bundle 1.02.05
Selection 2.08.04
Sitemap 1.06.03
Taxonomy 1.11.06
TCMP 1.09.00

Enterprise

Addon Reporting 1.08.01
Addon Targeting 2.26.04*
Addon Edition Indicator 1.03.01
Addon Advanced Search 1.04.06*
Addon Eforms 1.03.14*
Addon Replication 2.26.04
Addon Synchronization 2.26.01

Dependencies

Jackrabbit 2.6.5

(*) - New artifact versions

Improvement

CMS

  • [CMS-9787] - [Backport to 7.9] Show new-folder icon for custom workflow actions that add a folder

REPOSITORY

  • [REPO-1405] - [Backport 7.9] No need to support DTD or XML validating in SystemViewXML

ENTERPRISE FORMS

  • [EFORMS-349] - Backport to 7.9 - translate labels of form export for NL

Bug

REPOSITORY

  • [REPO-1410] - [7.9] Code to prevent multiple same-state variants from being created can cause database inconsistencies

TARGETING

  • [BT-895] - [backport 7.9] Targeting - regression - when editing a persona's preview criteria, the screen does not scroll
  • [BT-1382] - [Backport to 7.9] Improve rendering of persona and target group names

ADVANCED SEARCH

  • [ENT-877] - [backport 7.9] Inconsistent results between Search and Advanced Search

ENTERPRISE FORMS

  • [EFORMS-334] - Backport to 7.9: getSubmissionCount in StoreCounterStrategy not working when node name starts with digits
  • [EFORMS-335] - Backport to 7.9: Actual store count not working when node name starts with digits
  • [EFORMS-340] - Counter node in FormCounterExtension not found
  • [EFORMS-357] - Bckport 331 to 7.9: XSS vulnerability in Eforms radiogroup/checkbox fields
  • [EFORMS-360] - Backport 347 to 7.9: Eforms has several XPath queries that does not escape path and query value properly

TASK

CMS

  • [CMS-9796] - Update copyright year on login screen to 2016