Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Pasted JIRA-generated release notes in.

Tentatively: 11 June 2014

uPortal 4.0.14 GA Announcement

Apereo is proud to announce uPortal 4.0.14, continuing in our regular patch releases of uPortal 4.0.

Human-readable release notes

...

Updating from 4.0.0-4.0.5

Warning
titledb-update will drop data

If you have data you care about in the UP_LOGIN_EVENT_AGGREGATE table please back it up externally or rename the table before executing the following steps. db-update will drop this table.

After configuring your uPortal 4.0.14 source run:

  • ant db-update

Downloads: http://www.jasig.org/uportal/download/uportal-4014 (TODO: Download link does not yet work.)
Release Notes: https://wiki.jasig.org/display/UPC/4.0.14 (TODO: this page not yet complete)
Maven Project Site: http://developer.jasig.org/projects/uportal/4.0.14/ (TODO: Maven site does not yet exist)

 

These developers contributed commits to this release:

 

 

Full Release Notes Generated from JIRA:

Release Notes - uPortal - Version 4.0.14

Security Bugs Fixed

  • [UP-4105] - CVE-2014-3416 MANAGE[-*] permissions not enforced
  • [UP-4106] - CVE-2014-3417 Any user can Configure any portlet they can SUBSCRIBE

Other Bugs fixed

  • [UP-3276] - Significant set of DB resource leaks in org.jasig.portal.layout.simple.RDBMUserLayoutStore
  • [UP-3786] - Remove the broken, extraneous 'Popular Portlets' button from the Portlet Manager
  • [UP-3864] - Manage permissions - cannot select principal in perms by category
  • [UP-3869] - Bamboo build failures with 'connection exception: connection failure: java.io.EOFException' on hsql shutdown
  • [UP-3870] - Fix Universality themes : add missing sass changes defined in css files ; add missing css changes defined in sass files ; add missing images
  • [UP-3873] - Fix error when tester is null on PersonAttributesGroupStore.java test method
  • [UP-3874] - Fix null group member entity
  • [UP-3881] - Maven goal (data-import) on project Announcements fails for Windows
  • [UP-3883] - StackOverflowError on Tomcat 7.0.47 whenever a session logs out
  • [UP-3895] - DLM's ProfileEvaluatorFactory fails to import the XML produced by the ProfileEvaluator on export
  • [UP-4013] - Search of Portlets fails to find portlets with uppercase in string that should match
  • [UP-4033] - Emergency Alert missing from guest view in 4.0.x
  • [UP-4054] - Bug

...

Improvement

New Feature

...

  • in the reset-password flow that renders it unusable
  • [UP-4056] - Clustered CAS Clearpass Configuration not working
  • [UP-4057] - AuthorizableActivity.java constructor args in wrong order
  • [UP-4058] - PortletCategoryRegistryLocator bean missing from locatorContext.xml
  • [UP-4092] - PortalPermissionEvaluator sends the wrong TARGET String for JsonEntityBean objects when it checks permissions for REST API calls
  • [UP-4115] - Trivial typos in documentation
  • [UP-4117] - Quickstart readme documents wrong portal.log file path

Improvements Realized

  • [UP-3867] - Update jQuery-Mobile to the last version : use jquery-mobile 1.3.2 instead of jquery-mobile 1.1.1
  • [UP-3868] - Fix zoom scale problems and bugs with fixed toolbars
  • [UP-3871] - Fix mistypes on messages and improve fr translations
  • [UP-3872] - Improve internationalization of Search Portlet and Directory Search Portlet
  • [UP-3875] - Add environment filters for cas context (/cas) and all params of email sending configuration
  • [UP-3876] - Update jQuery, jQuery-UI, Backbone, Underscore and others javascripts libs used by universality and muniversality skins
  • [UP-3877] - Improving text-shadows : fix bad blur effects on some buttons, lists, ui-li-dividers when a black text has a black text-shadow ; Removed any remaining blur on text shadows for better performance (@see jquery/jquery-mobile@7903171)
  • [UP-3898] - Replace Calendar portlet default holiday data feed to Google
  • [UP-3967] - Put password encryption value in portal.properties
  • [UP-3970] - Configure uPortal's ehcache to be a shared cache
  • [UP-4037] - Include as much of ClearPass configuration as possible in standard configuration
  • [UP-4066] - Manage Portlets: Group and category selection use permissions to get forest root
  • [UP-4108] - Changes to allow CAS Clearpass to work in clustered uPortal environments
  • [UP-4113] - Update issue tracker URL in Quickstart readme
  • [UP-4114] - Update uPortal website URL in quickstart readme.
  • [UP-4116] - Remove reference to -dev quickstart
  • [UP-4118] - Add quickstart readme instruction re submitting security defect reports
  • [UP-4119] - Note bugs-affecting-version search embedded on release notes wiki page

New Features Added

  • [UP-3755] - Introduce the management of an alternative maximized link in portlet parameters
  • [UP-4034] - Add a portlet preference to the portal-activity portlet to toggle display of popular searches

Stories Told

  • [UP-3885] - Update resource-server exclusions in 4.0.x to exclude slf4j
  • [UP-4024] - Maven build fails on a new machine due to CalendarPortlet dependency on xalan:serializer, which is in offline 3rd-party repo

Tasks Completed

  • [UP-3889] - Change memberOf to deepMemberOf for most DLM fragments

-Andrew Petro

 

Deployer Notes

...