Release Notes for XWiki 18.4.2
This is the release notes for XWiki Commons, XWiki Rendering and XWiki Platform. They share the same release notes as they are released together and have the same version.
This is a bug fix release containing important fixes. The 18.4.x intermediate LTS branch will be supported in parallel to the LTS branch until the end of the year, for more details see our versioning and release practices. This release contains security fixes, with the highest severity being 8.7/10.
New and Noteworthy (since XWiki 18.4.1)
Full list of issues fixed and Dashboard for 18.4.2.
Upgrades
The following runtime dependencies have been upgraded (they have a different release cycle than XWiki Commons, XWiki Rendering and XWiki Platform):
Translations
The following translations have been updated:
Security Issues
Security issues are not listed in issue lists or dashboards to avoid disclosing ways to use them, but they will appear automatically in them once they're disclosed. See the XWiki Security Policy for more details.
Known issues
Backward Compatibility and Migration Notes
General Notes
- When upgrading make sure you compare and merge the following XWiki configuration files since some parameters may have been modified, removed or added:
- xwiki.cfg
- xwiki.properties
- web.xml
- hibernate.cfg.xml
- Add xwiki.store.migration=1 in xwiki.cfg so that XWiki will attempt to automatically migrate your current database to any new schema. Make sure you backup your Database before doing anything.
Issues specific to XWiki 18.4.2
Name Attribute Disallowed on Most Elements
For security reasons, the use of the name attribute has been restricted. In XWiki syntax, it is only allowed on links. In the content of HTML macros in a document without script right or a comment, it is only allowed on <a> and <map> elements. In practice, this shouldn't cause but if necessary, this can be configured in the configuration of the XML Module in xwiki.properties.
API Breakages
The following APIs were modified since XWiki 18.4.1:
No breakage!
Credits
The following people have contributed code and translations to this release (sorted alphabetically):
- Cédric LAMBLIN
- Gabriel Féo
- Manuel Leduc
- Marius Dumitru Florea
- Michael Hamann
- Simon Urli
- Simpel
- Thomas Mortagne
- Vincent Massol
- xrichard