Confluence Docs 3.0 : Release Notes 2.5.6 This page last changed on Aug 07, 2007 by smaddox. Confluence 2.5.6 is a recommended upgrade that resolves a number of security bugs and other issues you may have encountered in Confluence 2.5.5 or earlier. As such this release is a recommended upgrade for all customers. Confluence 2.5.6 can be downloaded from http://www.atlassian.com/software/confluence/ConfluenceDownloadCenter.jspa, and is a free upgrade for all customers who purchased their Confluence license or maintenance renewal after August 8th 2006. ### Upgrading to Confluence 2.5.6 Upgrading Confluence should be fairly straightforward. You can find instructions here. We strongly recommend that you backup your `confluence.home` directory and database before upgrading! ### Changes in 2.5.6 For details about the security fixes, please see the security advisory. CONF-8944 resolves a Crowd integration issue for Confluence 2.5.6 and later. The Crowd integration fix will be ported to previous Confluence versions in the near future - please see CONF-9122. Here's a complete list of the bug fixes in Confluence 2.5.6: Errors were reported by the JIRA trusted connection. APP_UNKNOWN; Unknown Application: {0}; ["confluence:4557196"]
JIRA Issues (19 issues)
Type | Key | Summary | Priority | Status | Resolution
--- | --- | --- | --- | --- | ---
| CONF-9073 | Changes to Crowd and Confluence integration instructions |  | Resolved | Fixed
| CONF-9067 | Division by zero in SnipSnapImporter |  | Resolved | Fixed
| CONF-9060 | Missing text in breadcrumbs when viewing changes since last login |  | Resolved | Fixed
| CONF-9000 | OutOfMemoryError's during indexing |  | Resolved | Fixed
| CONF-8993 | Reflected XSS Vulnerability in the Feed Builder |  | Resolved | Fixed
| CONF-8989 | Index rebuild tasks involving an index optimization produce an OutOfMemoryError when there are many large textual attachments |  | Closed | Incomplete
| CONF-8980 | XSS vulnerability at "Edit Space Permissions" |  | Resolved | Fixed
| CONF-8979 | Vulnerability against DoS attack at permission setting |  | Resolved | Fixed
| CONF-8978 | Vulnerability against DoS attack via labels |  | Resolved | Fixed
| CONF-8956 | stored XSS vulnerability in app/themes/leftnavigation/configuretheme.action |  | Resolved | Fixed
| CONF-8952 | XSS vulnerability in app/pages/listpages-alphaview.action |  | Resolved | Fixed
| CONF-8951 | XSS vulnerability in app/spaces/editspace.action |  | Closed | Duplicate
| CONF-8950 | XSS vulnerability in app/spaces/listattachmentforspace.action |  | Resolved | Fixed
| CONF-8944 | Profile settings are lost when using Crowd with Confluence |  | Closed | Fixed
| CONF-8914 | "Save" button mentioned as "Update" on change password screen |  | Resolved | Fixed
| CONF-8869 | JavaScript error occurs when editing a page without having permission to restrict it |  | Resolved | Fixed
| CONF-8623 | Improve and speed up plugin resource loading |  | Resolved | Fixed
| CONF-7414 | Officially support mySQL 5.0 |  | Resolved | Fixed
| CONF-3673 | Page restrictions do not restrict Space Administrators |  | Resolved | Fixed

Document generated by Confluence on Nov 05, 2009 23:33