Security
SSL Security Advisory
The POODLE attack (PaddingOracleOnDowngradedLegacyEncryption) allows to steal “secure” HTTP cookies when SSL 3.0 is being used. We strongly recommend disabling SSL 3.0 support in your apache webserver configuration and if needed to update the openssl library once a fix for this issue has been released.
The SSL support for the Gentics Content.Node 5.15.x (Tegal) package installer has been removed. New package installations should use the latest version of GCN.
Bugfix RT58544
When an editor using Aloha Editor on Internet Explorer tried to leave the edited page (e.g. by clicking into the tree) with unsaved changes, a confirm message was shown, whether the changes should be saved before leaving the page. However, saving never worked, regardless of whether “OK“ or “Cancel” was clicked. Since it is not possible to save the page in an asynchronous call when leaving the page (the browser just would not issue the asynchronous save request), the behaviour when just leaving the page with unsaved changes has now been unified for all browsers: The user will get a notification message, explaining that unsaved changes would be lost when leaving the page.
Bugfix RT58531
When an editor without permission to publish a page tried to publish a page that was missing some mandatory tags, the page would be put into the queue nevertheless. This is incorrect, the check for missing mandatory tags has to be done before putting the page into the queue. The behaviour has been changed now, so that it is not possible to put a page into the queue, if it is missing mandatory tags.
Bugfix RT58539
When creating pages from within the todo tool, the language was not correctly set, if the Node, the user had visited last, did not have that language activated. This has been fixed now, the language will now be checked against the languages of the Node, where the page is created.
Bugfix RT58554
GenticsImageStore: A previous bugfix could cause the colors of a resized image to be wrong. The bugfix has been updated in order to prevent such wrong colors.
Bugfix RT58537
Image Manipulation: The error “include imagemanipulation2 not found.” which showed up in the error log but had no functional consequence was fixed.
This Gentics Content.Node version includes the Aloha Editor 0.25.18 – 08.10.2014