From do-not-reply at jboss.org Mon May 24 04:08:12 2010
Content-Type: multipart/mixed; boundary="===============8853572257044657752=="
MIME-Version: 1.0
From: do-not-reply at jboss.org
To: gatein-commits at lists.jboss.org
Subject: [gatein-commits] gatein SVN: r3183 -
portal/branches/EPP_5_0_0_Branch_Docs/Enterprise_Portal_Platform_Release_Notes/en-US.
Date: Mon, 24 May 2010 04:08:12 -0400
Message-ID: <201005240808.o4O88CP7001603@svn01.web.mwc.hst.phx2.redhat.com>
--===============8853572257044657752==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Author: smumford
Date: 2010-05-24 04:08:11 -0400 (Mon, 24 May 2010)
New Revision: 3183
Modified:
portal/branches/EPP_5_0_0_Branch_Docs/Enterprise_Portal_Platform_Release=
_Notes/en-US/Release_Notes.xml
Log:
JBEPP-279: Added content to Known Issues section. Requires technical verifi=
cation and further content for autologin issue
Modified: portal/branches/EPP_5_0_0_Branch_Docs/Enterprise_Portal_Platform_=
Release_Notes/en-US/Release_Notes.xml
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
--- portal/branches/EPP_5_0_0_Branch_Docs/Enterprise_Portal_Platform_Releas=
e_Notes/en-US/Release_Notes.xml 2010-05-24 05:29:09 UTC (rev 3182)
+++ portal/branches/EPP_5_0_0_Branch_Docs/Enterprise_Portal_Platform_Releas=
e_Notes/en-US/Release_Notes.xml 2010-05-24 08:08:11 UTC (rev 3183)
@@ -634,52 +634,285 @@
Every reasonable effort has been made to address issues with the previo=
us releases of Enterprise Portal Platform. However, since this is a complet=
ely new architecture it is difficult to provide a pure translation of issue=
s from release to release.
=
-
+
+ Security Issues
+
+
+ https://jira.jboss.org/browse/JBPAPP-3171
+
+
+ Cross-site scripting (XSS) vulnerabilities were found in the Enterpr=
ise Application Platform component of &PRODUCT;. While the issue has been a=
ddress, some minor vulnerabilities may linger in this release.
+
+
+ This issue will be completely resolved in the next minor release of =
&PRODUCT;
+
+
+
+
+ https://jira.jboss.org/browse/JBPAPP-4141
+
+
+ Some servlets may leak information about a portal's version, running=
environment, system hardware or Java Virtual Machine setups.
+
+
+ This issue will be completely resolved in the next minor release of =
&PRODUCT;
+
+
+
+
+ Autologin
+
+
+ The new autologin feature in &PRODUCT;, could be exploited in produc=
tion environments.
+
+
+ To disable autologin ...
+
+
+
+
+
+
+ Non-changing Captcha
+
+
+ The captcha registration feature can be brute-forced to not change, =
which can allow fake users to be created automatically and in bulk.
+
+
+ To prevent this a new captcha must be created with every po=
st request to the portal user register.
+
+
+ This fix will be implemented in the next minor release of &PRODUCT;.
+
+
+ =
+
+
+
+
+
General Known Issues
-
-
+
+ <ulink url=3D"https://jira.jboss.org/browse/JBEPP/component/12=
312983">https://jira.jboss.org/browse/JBEPP/component/12312983</ulink></tit=
le>
+ <para>
+ A short list of general issues in this release.
+ </para>
+ </formalpara>
+ </section>
+
+ <section id=3D"sect-Release_Notes-_Known_Issues_with_this_release_-Compo=
nent_Specific_Known_Issues">
+ <title>Specific Known Issues
+
+
+ https://jira.jboss.org/browse/JBE=
PP-167
- JIRA Link
+ Embed jcip-annotations.jar into /server/default/lib.
+
+
+ https://jira.jboss.org/browse/JBEPP-207
- JIRA Link
+ A NullPointerException may be encountered when s=
electing a page which has been deleted in Page Management.
+
+
+ https://jira.jboss.org/browse/JBEPP-208
- JIRA Link
+ An 'Unknown errror' while editin=
g page/layout in Dashboard under certain scenario.
-
-
-
-
- Component Specific Known Issues
-
-
+
+
+ https://jira.jboss.org/browse/JBEPP-210
- JIRA Link
+ An 'Unknown error' may be return=
ed when trying to save an page on which an application has been removed.
+
+
+ https://jira.jboss.org/browse/JBEPP-212
- JIRA Link
+ Performing concurrent modifications of a dashboard may result in an=
error.
+
+
+ https://jira.jboss.org/browse/JBEPP-226
- JIRA Link
+ Uppercase and lowercase characters are not differentiated in the ap=
plication registry.
-
-
-
+
+
+ https://jira.jboss.org/browse/JBEPP-262
+
+
+ &PRODUCT; requires a one-off patch on EAP to fix the bug JBossWS - Time=
out value gets inserted into URLs.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-296
+
+
+ The error message "Page not found" is displayed after the layout of any portal page is edited.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-315
+
+
+ Pre-release testing indicated that render parameters in JSR-286 por=
tlets are not replicating in a cluster with 2-nodes.
+
+
+ =
+
+ https://jira.jboss.org/browse/JBEPP-326
+
+
+ The error message displayed when creating portal which starts with =
number (an illegal character) contains the typographical error 'contains'.
+
+
+ The message should read as: The "Portal Nam=
e :" field must start with a character and must not contain special charact=
ers.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-331
+
+
+ The logo in the logo portlet on the &PRODUCT; Dashboard has a relat=
ive URL. This can cause URL validation issues returning the error: The field "logoUrl" must match the format "URL".
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-334
+
+
+ Uppercase lettering does not work with MYSQL databases. This can ca=
use problems when creating pages or portals with the same name.
+
+
+ This is caused by MYSQL's VARCAHR entry in the <=
literal>JCR_SITEM table not being case sensitive. A patch has bee=
n written that solves this issue by switching the VARCHAR entry to use VARBINARY which i=
s case sensitive.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-339
+
+
+ A NullPointerException is encountered when attem=
pting to access a Dashboard after a page has been deleted.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-342
+
+
+ Unicode and special characters in some languages (specifically Germ=
an) are badly escaped in the names of navigation nodes.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-343
+
+
+ When creating or deleting new group navigations, changes do not app=
ear in the portal until after a logout/login is undertaken.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-344
+
+
+ There are currently some User Interface display inconsistencies whe=
n using Internet Explorer 6 to edit or view a portal. =
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-350
+
+
+ An error is encountered when adding a gadget to a portal using a MY=
SQL database if the '/server/production' folder has be=
en removed but the database has not been cleaned.
+
+
+ In this scenario the error; Unable to retri=
eve gadget xml. HTTP error 500 is returned.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-355
+
+
+ The portal will return a permissions error when trying to add all g=
roups in the group navigation, even if the user is logged in as the portal =
administrator (root). =
+
+
+ The error message will read: This user does=
n't have permissions to add navigation.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-356
+
+
+ Groups listed in the Add Navigation window of the Group navigation =
page are not currently listed in alphabetical order.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-358
+
+
+ When using the portal with the French language and attempting to re=
cover a lost/forgotten password, the recovery window is not translated into=
French and refers to the portal as eXo, as opposed to &PRODUCT;.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-360
+
+
+ The login page shown after a timed-out session or a failed login at=
tempt is currently branded with the GateIn name and logo=
. GateIn is the community project that &PRODUCT; is base=
d on.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-362
+
+
+ The JSPHelloWorld portlet example currently returns the line: "my name is JBoss Portal. What's yours?". The=
line should read: "my name is &PRODUCT;. What's yo=
urs?".
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-367
+
+
+ The SEAM component used in &PRODUCT; &VERSION; has a bug that makes=
it generate AS 5 incompatible pages.
+
+
+
+
+ https://jira.jboss.org/browse/JBEPP-369
+
+
+ The use of two JSR286 portlets that use the same portlet-name but d=
ifferent portlet applications will create an exception in the application r=
egistry.
+
+
+
+
+
+
=
+
Migration from JBoss Portal 4.3
--===============8853572257044657752==--