Release Notes for OpenCms 9.5.3

January 13, 2016: OpenCms 9.5.3 is a maintenance update that fixes several issues that persisted in the 9.5.2 release. Adding a limited number of new features, this version focuses on security and stability.

Download binaries

Distribution
Upgrade Wizard

New in OpenCms 9.5.3

• Added Java 8 support.
• Improved the source code editor in WYSIWYG fields.
• Gallery dialog now memorizes the last search result sort order.
• Demo template updated to Bootstrap 3.3.6 and jQuery 1.11.3.

Improved in OpenCms 9.5.3

• Fixed issue #231 where lower case SQL statements failed on MSSQL DBs.
• Fixed issue #240/#307 where invalid dates were not handled properly by the content editor.
• Fixed issue #279 related to Java 8 support.
• Fixed issue #282 with MySQLSyntaxErrorException for DROP DATABASE in setup.sh (pr #346 by gallardo).
• Fixed issue #296 with wrong order of choice elements after XSD change or saving in control code editor (fix by mwxwidmann).
• Fixed issue #321 where download galleries would not show any images.
• Fixed issue #331 where permalinks to resources beneath /shared/ where not generated properly.
• Fixed issue #333 where non VFS documents in Solr indices where not considered in the result size calculation (fix by kartobi).
• Fixed issue #339 where "stylesformat" setting would not always work for TinyMCE widget.
• Fixed issue #340 where the log file viewer failed due to spaces in the web application path.
• Fixed issue #344 where malformed HTML was inserted in direct edit mode.
• Fixed issue #350 where direct editing of collector list content would fail in Firefox 41.
• Fixed issue #353 by improving login cookie generation.
• Fixed issue #357 by improving default file name generation.
• Fixed issue #359 where some context menu entries did have the wrong visibility settings.
• Fixed issue #360 where quick search within the category widget failed.
• Fixed issue #365 where link excludes were not considered during link generation.
• Fixed issue #369 where sort by title did not work for images in gallery dialog.
• Pull request #188 adds support for specifying a custom charset for notification mails (pr by t-nasu).
• Pull request #338 fixes issue with sourceSets in Gradle scripts (pr by gallardo).
• Pull request #351 adds support for JPA enhancement of Java 8 classes (pr by gallardo).
• Pull request #354 fixes an issue with NPE in log during shutdown when Solr is disabled (pr by gallardo).
• Pull request #356 fixes another issue with NPE in log during shutdown (pr by gallardo).
• Updated the source code editor to latest version of CodeMirror (5.10).
• Updated the WYSIWYG editor to latest version of TinyMCE (4.3.2).
• Security: Fixed advisory SYSS-2015-063 regarding XSS vulnerabilities in workplace login (reported by SySS GmbH).
• Security: Updated "Commons Collections" dependency to avoid deserialization security issue.
• Security: Fixed several XSS issues, mostly in the demo content.
• Security: Added stronger role checks when users access an editor.
• Solr: Added "decodeUrl" option to Solr collector.
• Solr: Added field-to-containerpage mapping in Solr indexer.
• Solr: Improved Solr shutdown to avoid memory leaks.
• Solr: Fixed URL decoding issue in content collector.
• Solr: Fixed NPE when reading document dependencies while indexing.
• Solr: renamed field/type _cs to _comma to avoid conflict with Czech locale.
• Fixed issue with the login-form property not working correctly for detail pages.
• Fixed issue with editor change handlers not being able to change values of invisible fields.
• Fixed issue where links were invalidated in the content editor and thus became uneditable.
• Fixed issue with pointers / htmlredirects not working for internationalized domain names.
• Fixed issue with type name replacement in module clone dialog.
• Fixed issue where toolbar buttons would become enabled for non editable resources.
• Fixed issue with content editor fields becoming unselectable in IE11.
• Fixed issue with limited Lucene date range queries.
• Fixed issue with widget for selection of organizational units.
• Fixed issue with NPE during formatter selection.
• Fixed issue with NPE during inline editing.
• Fixed issue where users could not be added to a virtual group if already member of a related role.
• Fixed issue with selecting multiple formatters defined in schema.
• Fixed issue with caching of formatter configurations defined in schema.
• Fixed issue with language detection for locales having the same language like en_GB and en_US.
• Fixed issue where import failed due to missing principals.

General OpenCms features

• The page editor allows WYSIWYG inline editing of web pages and arrangement of content by drag & drop.
• The form based editor allows editing of structured content in a well defined form mask.
• The sitemap editor allows to create new pages and re-arrange the navigation tree by drag & drop.
• Responsive demo template based on Bootstrap 3.
• Content creation for mobile devices with preview and device specific content control.
• Structured contents can be defined using a simple XML schema.
• Easy to use "Online / Offline" workflow, changes must be approved before they become visible.
• Link management for all internal resources with broken link detection.
• Integrated image scaling and cropping.
• SEO features with automatic sitemap.xml generation and page alias support.
• Full featured user management that supports the concept of "Organizational Units" (OUs).
• Allows management of multiple websites within one installation.
• Contents can be served dynamically or exported to static HTML files.
• Direct access to the OpenCms content repository over a shared network drive.
• CMIS and WebDAV access to the OpenCms content repository.
• Integrates Apache SOLR for powerful content searching and noSQL like queries.
• Full text search for web pages as well as in office documents like PDF, MS Office and Open Office.
• Extensions can be added through a flexible module system.
• The "time warp" feature allows to view resources which are expired or not yet released.
• JSP integration for dynamic functionality in templates, dynamic forms etc.
  ... and many more

Backward compatibility

OpenCms 9.5.3 is fully backward compatible with all 8.x and 9.x versions. Templates and other OpenCms developed code from these versions should work "out of the box" with version 9.5.3.

Notice for users of Alkacon OCEE OpenCms 9.5.3 requires a new version of Alkacon OCEE. The update is free for Alkacon customers with a valid OCEE update subscription. Please contact Alkacon to receive the new version.
Compatibility with Java versions, servlet containers and databases

Compatibility with Java versions, servlet containers and databases

OpenCms 9.5.3 has been written and tested for Java 6, 7 and 8. We have tested with ORACLEs JDK as well as OpenJDK. OpenCms should run with all compliant JVMs.

We have tested this release on the Tomcat servlet engine. OpenCms works "out of the box" with Tomcat 7 and 8, which we recommend. Others have reported deploying OpenCms successfully on other servlet containers like JBoss, BEA, Websphere, Glassfish and Resin.

On the database side, we have tested with MySQL, MariaDB, Oracle, PostgreSQL, MS SQL Server, DB2 and HSQLDB.