Gentics Content.Node Changelogs

---

Security

SSL Security Advisory
The POODLE attack (PaddingOracleOnDowngradedLegacyEncryption) allows to steal “secure” HTTP cookies when SSL 3.0 is being used. We strongly recommend disabling SSL 3.0 support in your apache webserver configuration and if needed to update the openssl library once a fix for this issue has been released.

• CVE-2014-3566

---

Bugfix RT58544

When an editor using Aloha Editor on Internet Explorer tried to leave the edited page (e.g. by clicking into the tree) with unsaved changes, a confirm message was shown, whether the changes should be saved before leaving the page. However, saving never worked, regardless of whether “OK“ or “Cancel” was clicked. Since it is not possible to save the page in an asynchronous call when leaving the page (the browser just would not issue the asynchronous save request), the behaviour when just leaving the page with unsaved changes has now been unified for all browsers: The user will get a notification message, explaining that unsaved changes would be lost when leaving the page.

---

Bugfix RT58531

When an editor without permission to publish a page tried to publish a page that was missing some mandatory tags, the page would be put into the queue nevertheless. This is incorrect, the check for missing mandatory tags has to be done before putting the page into the queue. The behaviour has been changed now, so that it is not possible to put a page into the queue, if it is missing mandatory tags.

---

Bugfix RT58539

When creating pages from within the todo tool, the language was not correctly set, if the Node, the user had visited last, did not have that language activated. This has been fixed now, the language will now be checked against the languages of the Node, where the page is created.

---

Bugfix RT58537

Image Manipulation: The error “include imagemanipulation2 not found.” which showed up in the error log but had no functional consequence was fixed.

---