Confluence Docs 3.0 : Confluence 2.6.1 Release Notes This page last changed on Nov 18, 2007 by smaddox. 9 November 2007 Atlassian is proud to announce the release of Confluence 2.6.1. This is a highly recommended upgrade from 2.6, because it fixes some security flaws which may affect Confluence instances in a public environment. We will release more details of the security fixes within a few days, giving our customers a chance to upgrade before the details are made public. This point release also includes more than 40 other fixes and improvements. We're especially glad that anonymous comments will no longer show the profile picture of the previous commenter, and newly-created spaces no longer seem to have been created by an anonymous user. The {excerpt} and {excerpt-include} macros now behave better. And we've fixed some issues with internationalisation. There's a complete list of fixes below. You can download Confluence 2.6.1 from the download centre.
| Security Advisory 19 November 2007 We have now published the details of the security vulnerabilities, which are fixed in Confluence 2.6.1. Please refer to the security advisory for more information.
### Upgrading from a previous version of Confluence Upgrading Confluence should be fairly straightforward. Please read the upgrade instructions. We strongly recommend that you back up your `confluence.home` directory and database before upgrading! ### Updates and fixes in this release Errors were reported by the JIRA trusted connection. APP_UNKNOWN; Unknown Application: {0}; ["confluence:4557196"]
JIRA Issues (50 issues)
Type | Key | Summary | Priority | Status | Resolution
--- | --- | --- | --- | --- | ---
| CONF-9960 | Missing files from the Confluence 2.6.1 standalone zip file |  | Resolved | Fixed
| CONF-9949 | Confluence 2.6.1 bundled Tomcat missing the java 1.4 compatibility jar |  | Resolved | Fixed
| CONF-9824 | Macros returning null from getBodyRenderMode() cause page edits to fail |  | Closed | Fixed
| CONF-9799 | atlassian-confluence.log not generated in Confluence 2.6 standalone |  | Resolved | Fixed
| CONF-9760 | Confluence 2.6.0 needs dependency cleanup |  | Closed | Fixed
| CONF-9732 | User migration JSP script for LDAP intergation is not compatible with JDK 1.4 |  | Resolved | Fixed
| CONF-9718 | DWR debug mode is enabled |  | Resolved | Fixed
| CONF-9714 | !! wiki notation doesn't seem to work for attached bmps in 2.6 |  | Resolved | Fixed
| CONF-9704 | Security Issue: XSS in wiki exception error page |  | Resolved | Fixed
| CONF-9700 | Plugin repository not available on websphere 5.1.10 |  | Resolved | Fixed
| CONF-9686 | Mail is not send by confluence for page updates |  | Closed | Fixed
| CONF-9671 | Duplicate javamail / mail JARs in different version |  | Resolved | Fixed
| CONF-9667 | Anonymous comments display user image of previous non-anonymous commenter |  | Resolved | Fixed
| CONF-9662 | Migrating attachments from file system to database presents a javascript error: response has no properties |  | Closed | Fixed
| CONF-9622 | Newly created spaces appear to have been created by "Anonymous" |  | Resolved | Fixed
| CONF-9590 | ConfluenceEntityObject.log is not static? |  | Resolved | Fixed
| CONF-9568 | NullPointerException occuring in DefaultReferralManager |  | Resolved | Fixed
| CONF-9565 | NullPointerException occuring in StylesheetAction |  | Resolved | Fixed
| CONF-9560 | Cross-site scripting vulnerability in 500page.jsp |  | Resolved | Fixed
| CONF-9536 | Selecting "site default" as preferred language results in alternating behavior |  | Resolved | Fixed
| CONF-9502 | Explain inclusion/exclusion of wiki markup (formatting, images, links) in excerpt and excerpt-include macros |  | Closed | Fixed
| CONF-9497 | Notifications for pages whose titles contain special characters have broken "Add Comment" links. |  | Resolved | Fixed
| CONF-9489 | The Excerpt Macro no longer works in comments |  | Resolved | Fixed
| CONF-9477 | Userlister macro ":groups=" option should not display all users when incorrectly specified or no group exists, and should accept ":group=" parameter |  | Resolved | Fixed
| CONF-9456 | XSS Bug in printable link display |  | Resolved | Fixed
| CONF-9454 | Pages created with restrictions show as created by Anonymous |  | Resolved | Fixed
| CONF-9436 | NPE adding page with metadata macro on CAC |  | Resolved | Fixed
| CONF-9431 | Bandana cache not flushed when site backup restored |  | Resolved | Fixed
| CONF-9392 | StackOverflowError in ConfluenceLinkResolver.extractLinkTextList |  | Resolved | Fixed
| CONF-9330 | Display the Server ID string in the Setup Wizard |  | Resolved | Fixed
| CONF-9209 | XSS in image wiki markup |  | Resolved | Fixed
| CONF-9164 | Clean up poorly formatted (bad) properties in ConfluenceActionSupport.properties |  | Closed | Fixed
| CONF-9151 | Excerpt macro now rendered with HTML paragraph tag |  | Resolved | Fixed
| CONF-9099 | the 'Insert Table' popup is full-screen wide |  | Resolved | Fixed
| CONF-9076 | Underlining mnemonic missing from "Edit" and "View" tabs on pages using default theme |  | Resolved | Fixed
| CONF-8983 | Excerpt-include macro does not display images. |  | Resolved | Fixed
| CONF-8866 | Shortcut link values are double URL-escaped |  | Resolved | Fixed
| CONF-8826 | Recently updated doesn't handle anonymous changes correctly |  | Resolved | Fixed
| CONF-8701 | if an {excerpt} includes links, the {excerpt-include} macro does not render them |  | Resolved | Fixed
| CONF-8673 | Missing i18n keys for dashboard's recently updated message |  | Resolved | Fixed
| CONF-8672 | Missing i18 keys for "Choose Owner" |  | Resolved | Fixed
| CONF-8671 | Missing i18 keys for Add label |  | Resolved | Fixed
| CONF-8669 | i18n keys for Confluence Daily Report HTML mail missing |  | Resolved | Fixed
| CONF-8534 | Using excerpt-include doesn't render the body in the {excerpt} macro when it contains {note} or {code} or {noformat} |  | Resolved | Fixed
| CONF-8004 | Missing I18N-key for Index Update Task Items |  | Resolved | Fixed
| CONF-7378 | "Remember me" does not work with sun application servers |  | Resolved | Fixed
| CONF-7127 | Can't edit page when watchers include an LDAP user without an email address |  | Resolved | Fixed
| CONF-6586 | Attachment links broken in text from include-excerpt macro |  | Resolved | Fixed
| CONF-5088 | Functional tests should test typical Atlassian User configuration |  | Closed | Fixed
| CONF-4753 | Excerpt macro does not work when placed in a heading. |  | Resolved | Fixed

Document generated by Confluence on Nov 05, 2009 23:29