Enportal/5.5/release notes 5.5.2 - Revision history

imported>Jason.nicholls at 09:14, 28 April 2015

2015-04-28T09:14:01Z

← Older revision		Revision as of 09:14, 28 April 2015
Line 3:		Line 3:
	== Introduction ==		== Introduction ==

	enPortal version 5.5.2 ~~is a production~~ released on March 9th, 2015~~. This page summarizes the New Features, Resolved Issues, and Known Issues for this release~~.		This page summarizes the new features, resolved issues, and known issues in enPortal version 5.5.2 released on March 9th, 2015.

	== What is enPortal ==		== What is enPortal ==
Line 20:		Line 20:
	== Supported Platform Changes ==		== Supported Platform Changes ==

	~~enPortal 5.5.2 introduces the following changes to the supported platforms:~~		* None

	* None

	== New Features ==		== New Features ==

	~~This section describes the enhancements to enPortal that are included in version 5.5.2.~~

	* Upgraded to Apache Tomcat version 7.0.59 to address CVE-2014-0227. (AB-980)
	* Upgraded to Xalan 2.7.2 and Xerces 2.11.0 Apache libraries to address CVE-2014-0107. (AB-930)
	* Upgraded to HttpClient 4.4 Apache library to address CVE-2014-3577. (EN-187)
	* Upgraded to Commons FileUpload 1.3.1 and POI 3.11 Apache libraries to address multiple CVEs. (AB-965)
	* Added support for AES-256 level encryption of passwords, in addition to the previously supported AES-128. For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-167)		* Added support for AES-256 level encryption of passwords, in addition to the previously supported AES-128. For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-167)
	* Upgraded one-way hashing algorithm for encrypting passwords from SHA-1 to SHA-2 (block size SHA-256). For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-168)		* Upgraded one-way hashing algorithm for encrypting passwords from SHA-1 to SHA-2 (block size SHA-256). For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-168)
Line 40:		Line 33:
	== Resolved Issues ==		== Resolved Issues ==

	~~This section describes the resolved issues that are included in enPortal~~ version 5.5.2.		* Upgraded to Apache Tomcat version 7.0.59 to address CVE-2014-0227. (AB-980)
			* Upgraded to Xalan 2.7.2 and Xerces 2.11.0 Apache libraries to address CVE-2014-0107. (AB-930)
			* Upgraded to HttpClient 4.4 Apache library to address CVE-2014-3577. (EN-187)
			* Upgraded to Commons FileUpload 1.3.1 and POI 3.11 Apache libraries to address multiple CVEs. (AB-965)
	* Fixed an issue where The <tt>{webapp.home}/custom/</tt> directory was being excluded from archives in the default configuration. For more information on customizing archives, see [[appboard/2.5/admin/backup_and_recovery#Customizing_the_Export\|Backup and Recovery]]. (AB-802)		* Fixed an issue where The <tt>{webapp.home}/custom/</tt> directory was being excluded from archives in the default configuration. For more information on customizing archives, see [[appboard/2.5/admin/backup_and_recovery#Customizing_the_Export\|Backup and Recovery]]. (AB-802)
	* Fixed an issue where the [[enportal/5.5/admin/unix_installation#Post_Installation_Tasks\|post_install]] script on a Solaris O/S would fail in some cases. (AB-927)		* Fixed an issue where the [[enportal/5.5/admin/unix_installation#Post_Installation_Tasks\|post_install]] script on a Solaris O/S would fail in some cases. (AB-927)
Line 51:		Line 46:

	== Known Issues ==		== Known Issues ==

	~~This section describes the new known issues in enPortal version 5.5.2.~~

	* There are no major new known issues in this release.		* There are no major new known issues in this release.

imported>Jason.nicholls at 08:29, 28 April 2015

2015-04-28T08:29:12Z

← Older revision		Revision as of 08:29, 28 April 2015
Line 28:		Line 28:
	This section describes the enhancements to enPortal that are included in version 5.5.2.		This section describes the enhancements to enPortal that are included in version 5.5.2.

	*Upgraded ~~the~~ Apache/Tomcat ~~web server component to~~ version 7.0.59 ~~for the latest security updates~~. (AB-980)		* Upgraded to Apache Tomcat version 7.0.59 to address CVE-2014-0227. (AB-980)
			* Upgraded to Xalan 2.7.2 and Xerces 2.11.0 Apache libraries to address CVE-2014-0107. (AB-930)
			* Upgraded to HttpClient 4.4 Apache library to address CVE-2014-3577. (EN-187)
			* Upgraded to Commons FileUpload 1.3.1 and POI 3.11 Apache libraries to address multiple CVEs. (AB-965)
	* Added support for AES-256 level encryption of passwords, in addition to the previously supported AES-128. For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-167)		* Added support for AES-256 level encryption of passwords, in addition to the previously supported AES-128. For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-167)
	* Upgraded one-way hashing algorithm for encrypting passwords from SHA-1 to SHA-2 (block size SHA-256). For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-168)		* Upgraded one-way hashing algorithm for encrypting passwords from SHA-1 to SHA-2 (block size SHA-256). For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-168)
Line 44:		Line 47:
	* Improved handling of rules in portal.css to better handle @ CSS rules, which were causing silent exceptions. Any portal.css files that include @ CSS rules (for example, @font-face) should be validated to confirm that they are working correctly. (EN-171)		* Improved handling of rules in portal.css to better handle @ CSS rules, which were causing silent exceptions. Any portal.css files that include @ CSS rules (for example, @font-face) should be validated to confirm that they are working correctly. (EN-171)
	* Fixed the <tt>portal keycreate</tt> command to properly handle the encrypting of all system passwords when the system administrator makes a manual key change. For more information on this command, see the [[enportal/5.5/admin/system_administration/CLI_utilities#Portal_Commands\|Portal Commands]] documentation. (EN-175)		* Fixed the <tt>portal keycreate</tt> command to properly handle the encrypting of all system passwords when the system administrator makes a manual key change. For more information on this command, see the [[enportal/5.5/admin/system_administration/CLI_utilities#Portal_Commands\|Portal Commands]] documentation. (EN-175)
	* Updated a library in httpclient 4.2.6 to address a vulnerability reported in CVE-2014-3577. (EN-187)
	* Fixed an issue where an application using a redirect with a "logout=true" request parameter could cause enPortal to interpret the command and terminate the enPortal session. (EN-170)		* Fixed an issue where an application using a redirect with a "logout=true" request parameter could cause enPortal to interpret the command and terminate the enPortal session. (EN-170)

imported>Mike.berman: added AB-980

2015-04-15T19:59:52Z

added AB-980

← Older revision		Revision as of 19:59, 15 April 2015
Line 28:		Line 28:
	This section describes the enhancements to enPortal that are included in version 5.5.2.		This section describes the enhancements to enPortal that are included in version 5.5.2.

			*Upgraded the Apache/Tomcat web server component to version 7.0.59 for the latest security updates. (AB-980)
	* Added support for AES-256 level encryption of passwords, in addition to the previously supported AES-128. For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-167)		* Added support for AES-256 level encryption of passwords, in addition to the previously supported AES-128. For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-167)
	* Upgraded one-way hashing algorithm for encrypting passwords from SHA-1 to SHA-2 (block size SHA-256). For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-168)		* Upgraded one-way hashing algorithm for encrypting passwords from SHA-1 to SHA-2 (block size SHA-256). For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-168)

imported>Mike.berman: added EN-170

2015-03-20T10:04:57Z

added EN-170

← Older revision		Revision as of 10:04, 20 March 2015
Line 44:		Line 44:
	* Fixed the <tt>portal keycreate</tt> command to properly handle the encrypting of all system passwords when the system administrator makes a manual key change. For more information on this command, see the [[enportal/5.5/admin/system_administration/CLI_utilities#Portal_Commands\|Portal Commands]] documentation. (EN-175)		* Fixed the <tt>portal keycreate</tt> command to properly handle the encrypting of all system passwords when the system administrator makes a manual key change. For more information on this command, see the [[enportal/5.5/admin/system_administration/CLI_utilities#Portal_Commands\|Portal Commands]] documentation. (EN-175)
	* Updated a library in httpclient 4.2.6 to address a vulnerability reported in CVE-2014-3577. (EN-187)		* Updated a library in httpclient 4.2.6 to address a vulnerability reported in CVE-2014-3577. (EN-187)
			* Fixed an issue where an application using a redirect with a "logout=true" request parameter could cause enPortal to interpret the command and terminate the enPortal session. (EN-170)

imported>Jason.nicholls: /* Introduction */

2015-03-09T15:30:52Z

Introduction

← Older revision		Revision as of 15:30, 9 March 2015
Line 3:		Line 3:
	== Introduction ==		== Introduction ==

	enPortal version 5.5.2 is a production ~~release scheduled for~~ March, 2015. This page summarizes the New Features, Resolved Issues, and Known Issues for this release.		enPortal version 5.5.2 is a production released on March 9th, 2015. This page summarizes the New Features, Resolved Issues, and Known Issues for this release.

	== What is enPortal ==		== What is enPortal ==

imported>Mike.berman: added EN-187

2015-03-08T18:25:11Z

added EN-187

← Older revision		Revision as of 18:25, 8 March 2015
Line 32:		Line 32:
	* Improved results of security scans by changing the JSESSIONID cookie whenever a session is created or terminated. (EN-173)		* Improved results of security scans by changing the JSESSIONID cookie whenever a session is created or terminated. (EN-173)
	* Increased the length of the enPortal_sessionid cookie from 16 hex chars (64 bits) to 64 hex chars (256 bits) to exceed the current security recommendation. (EN-174)		* Increased the length of the enPortal_sessionid cookie from 16 hex chars (64 bits) to 64 hex chars (256 bits) to exceed the current security recommendation. (EN-174)


	== Resolved Issues ==		== Resolved Issues ==
Line 42:		Line 43:
	* Improved handling of rules in portal.css to better handle @ CSS rules, which were causing silent exceptions. Any portal.css files that include @ CSS rules (for example, @font-face) should be validated to confirm that they are working correctly. (EN-171)		* Improved handling of rules in portal.css to better handle @ CSS rules, which were causing silent exceptions. Any portal.css files that include @ CSS rules (for example, @font-face) should be validated to confirm that they are working correctly. (EN-171)
	* Fixed the <tt>portal keycreate</tt> command to properly handle the encrypting of all system passwords when the system administrator makes a manual key change. For more information on this command, see the [[enportal/5.5/admin/system_administration/CLI_utilities#Portal_Commands\|Portal Commands]] documentation. (EN-175)		* Fixed the <tt>portal keycreate</tt> command to properly handle the encrypting of all system passwords when the system administrator makes a manual key change. For more information on this command, see the [[enportal/5.5/admin/system_administration/CLI_utilities#Portal_Commands\|Portal Commands]] documentation. (EN-175)
			* Updated a library in httpclient 4.2.6 to address a vulnerability reported in CVE-2014-3577. (EN-187)

imported>Mike.berman: added EN-173

2015-02-05T20:23:29Z

added EN-173

← Older revision		Revision as of 20:23, 5 February 2015
Line 30:		Line 30:
	* Added support for AES-256 level encryption of passwords, in addition to the previously supported AES-128. For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-167)		* Added support for AES-256 level encryption of passwords, in addition to the previously supported AES-128. For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-167)
	* Upgraded one-way hashing algorithm for encrypting passwords from SHA-1 to SHA-2 (block size SHA-256). For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-168)		* Upgraded one-way hashing algorithm for encrypting passwords from SHA-1 to SHA-2 (block size SHA-256). For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-168)
			* Improved results of security scans by changing the JSESSIONID cookie whenever a session is created or terminated. (EN-173)
	* Increased the length of the enPortal_sessionid cookie from 16 hex chars (64 bits) to 64 hex chars (256 bits) to exceed the current security recommendation. (EN-174)		* Increased the length of the enPortal_sessionid cookie from 16 hex chars (64 bits) to 64 hex chars (256 bits) to exceed the current security recommendation. (EN-174)

imported>Mike.berman: added EN-174

2015-02-05T20:14:48Z

added EN-174

← Older revision		Revision as of 20:14, 5 February 2015
Line 30:		Line 30:
	* Added support for AES-256 level encryption of passwords, in addition to the previously supported AES-128. For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-167)		* Added support for AES-256 level encryption of passwords, in addition to the previously supported AES-128. For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-167)
	* Upgraded one-way hashing algorithm for encrypting passwords from SHA-1 to SHA-2 (block size SHA-256). For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-168)		* Upgraded one-way hashing algorithm for encrypting passwords from SHA-1 to SHA-2 (block size SHA-256). For more information, see [[enportal/5.5/admin/system_administration/security\|Product Security]]. (EN-168)
			* Increased the length of the enPortal_sessionid cookie from 16 hex chars (64 bits) to 64 hex chars (256 bits) to exceed the current security recommendation. (EN-174)

	== Resolved Issues ==		== Resolved Issues ==

imported>Mike.berman: added EN-175

2015-02-05T20:05:26Z

added EN-175

← Older revision		Revision as of 20:05, 5 February 2015
Line 40:		Line 40:
	* Fixed an issue where some cookies were not being sent by the cookie manager because the maxAge value in seconds was being treated as milliseconds. (EN-177)		* Fixed an issue where some cookies were not being sent by the cookie manager because the maxAge value in seconds was being treated as milliseconds. (EN-177)
	* Improved handling of rules in portal.css to better handle @ CSS rules, which were causing silent exceptions. Any portal.css files that include @ CSS rules (for example, @font-face) should be validated to confirm that they are working correctly. (EN-171)		* Improved handling of rules in portal.css to better handle @ CSS rules, which were causing silent exceptions. Any portal.css files that include @ CSS rules (for example, @font-face) should be validated to confirm that they are working correctly. (EN-171)
			* Fixed the <tt>portal keycreate</tt> command to properly handle the encrypting of all system passwords when the system administrator makes a manual key change. For more information on this command, see the [[enportal/5.5/admin/system_administration/CLI_utilities#Portal_Commands\|Portal Commands]] documentation. (EN-175)

imported>Mike.berman: added EN-171

2015-01-26T06:28:44Z

added EN-171

← Older revision		Revision as of 06:28, 26 January 2015
Line 39:		Line 39:
	* Fixed an issue where the [[enportal/5.5/admin/unix_installation#Post_Installation_Tasks\|post_install]] script on a Solaris O/S would fail in some cases. (AB-927)		* Fixed an issue where the [[enportal/5.5/admin/unix_installation#Post_Installation_Tasks\|post_install]] script on a Solaris O/S would fail in some cases. (AB-927)
	* Fixed an issue where some cookies were not being sent by the cookie manager because the maxAge value in seconds was being treated as milliseconds. (EN-177)		* Fixed an issue where some cookies were not being sent by the cookie manager because the maxAge value in seconds was being treated as milliseconds. (EN-177)
			* Improved handling of rules in portal.css to better handle @ CSS rules, which were causing silent exceptions. Any portal.css files that include @ CSS rules (for example, @font-face) should be validated to confirm that they are working correctly. (EN-171)