Tentatively: 11 June 2014
uPortal 4.0.14 GA Announcement
Apereo is proud to announce uPortal 4.0.14, continuing in our regular patch releases of uPortal 4.0.
Human-readable release notes
...
Updating from 4.0.0-4.0.5
Warning | ||
---|---|---|
| ||
If you have data you care about in the UP_LOGIN_EVENT_AGGREGATE table please back it up externally or rename the table before executing the following steps. db-update will drop this table. |
After configuring your uPortal 4.0.14 source run:
ant db-update
Downloads: http://www.jasig.org/uportal/download/uportal-4014 (TODO: Download link does not yet work.)
Release Notes: https://wiki.jasig.org/display/UPC/4.0.14 (TODO: this page not yet complete)
Maven Project Site: http://developer.jasig.org/projects/uportal/4.0.14/ (TODO: Maven site does not yet exist)
These developers contributed commits to this release:
- Ludovic Auxepaules
- Shawn Connolly
- Aaron Grant
- Julien Gribonvald
- Tim Levett
- Andrew Petro
- James Wennmacher
- Drew Wills
Full Release Notes Generated from JIRA:
Release Notes - uPortal - Version 4.0.14
Security Bugs Fixed
- [UP-4105] - CVE-2014-3416 MANAGE[-*] permissions not enforced
- [UP-4106] - CVE-2014-3417 Any user can Configure any portlet they can SUBSCRIBE
Other Bugs fixed
- [UP-3276] - Significant set of DB resource leaks in org.jasig.portal.layout.simple.RDBMUserLayoutStore
- [UP-3786] - Remove the broken, extraneous 'Popular Portlets' button from the Portlet Manager
- [UP-3864] - Manage permissions - cannot select principal in perms by category
- [UP-3869] - Bamboo build failures with 'connection exception: connection failure: java.io.EOFException' on hsql shutdown
- [UP-3870] - Fix Universality themes : add missing sass changes defined in css files ; add missing css changes defined in sass files ; add missing images
- [UP-3873] - Fix error when tester is null on PersonAttributesGroupStore.java test method
- [UP-3874] - Fix null group member entity
- [UP-3881] - Maven goal (data-import) on project Announcements fails for Windows
- [UP-3883] - StackOverflowError on Tomcat 7.0.47 whenever a session logs out
- [UP-3895] - DLM's ProfileEvaluatorFactory fails to import the XML produced by the ProfileEvaluator on export
- [UP-4013] - Search of Portlets fails to find portlets with uppercase in string that should match
- [UP-4033] - Emergency Alert missing from guest view in 4.0.x
- [UP-4054] - Bug
...
Improvement
New Feature
...
- in the reset-password flow that renders it unusable
- [UP-4056] - Clustered CAS Clearpass Configuration not working
- [UP-4057] - AuthorizableActivity.java constructor args in wrong order
- [UP-4058] - PortletCategoryRegistryLocator bean missing from locatorContext.xml
- [UP-4092] - PortalPermissionEvaluator sends the wrong TARGET String for JsonEntityBean objects when it checks permissions for REST API calls
- [UP-4115] - Trivial typos in documentation
- [UP-4117] - Quickstart readme documents wrong portal.log file path
Improvements Realized
- [UP-3867] - Update jQuery-Mobile to the last version : use jquery-mobile 1.3.2 instead of jquery-mobile 1.1.1
- [UP-3868] - Fix zoom scale problems and bugs with fixed toolbars
- [UP-3871] - Fix mistypes on messages and improve fr translations
- [UP-3872] - Improve internationalization of Search Portlet and Directory Search Portlet
- [UP-3875] - Add environment filters for cas context (/cas) and all params of email sending configuration
- [UP-3876] - Update jQuery, jQuery-UI, Backbone, Underscore and others javascripts libs used by universality and muniversality skins
- [UP-3877] - Improving text-shadows : fix bad blur effects on some buttons, lists, ui-li-dividers when a black text has a black text-shadow ; Removed any remaining blur on text shadows for better performance (@see jquery/jquery-mobile@7903171)
- [UP-3898] - Replace Calendar portlet default holiday data feed to Google
- [UP-3967] - Put password encryption value in portal.properties
- [UP-3970] - Configure uPortal's ehcache to be a shared cache
- [UP-4037] - Include as much of ClearPass configuration as possible in standard configuration
- [UP-4066] - Manage Portlets: Group and category selection use permissions to get forest root
- [UP-4108] - Changes to allow CAS Clearpass to work in clustered uPortal environments
- [UP-4113] - Update issue tracker URL in Quickstart readme
- [UP-4114] - Update uPortal website URL in quickstart readme.
- [UP-4116] - Remove reference to -dev quickstart
- [UP-4118] - Add quickstart readme instruction re submitting security defect reports
- [UP-4119] - Note bugs-affecting-version search embedded on release notes wiki page
New Features Added
- [UP-3755] - Introduce the management of an alternative maximized link in portlet parameters
- [UP-4034] - Add a portlet preference to the portal-activity portlet to toggle display of popular searches
Stories Told
- [UP-3885] - Update resource-server exclusions in 4.0.x to exclude slf4j
- [UP-4024] - Maven build fails on a new machine due to CalendarPortlet dependency on xalan:serializer, which is in offline 3rd-party repo
Tasks Completed
- [UP-3889] - Change memberOf to deepMemberOf for most DLM fragments
-Andrew Petro
Deployer Notes
...