Confluence Docs 3.0 : Confluence 2.6.2 Release Notes This page last changed on Nov 27, 2007 by smaddox. 27 November 2007 Atlassian is proud to announce the release of Confluence 2.6.2. This is a highly recommended upgrade, because it fixes some security flaws which may affect Confluence instances in a public environment. These flaws are XSS (cross-site scripting) vulnerabilities in some of Confluence's macros and Wiki Markup, which potentially allowed a user to insert malicious HTML tags or script into a Confluence page. Please refer to the Security Advisory for details. This point release also includes more than 20 other fixes and improvements. As part of our drive to tighten up the security in Confluence, we have removed support for the 'style' attribute in the Wiki Markup for images. This was an undocumented feature, which is now no longer available. To help those who may have used the 'style' tag to add coloured borders, we have added a new 'bordercolor' attribute to the image markup. The PDF and HTML space exports are now more reliable than in Confluence 2.6.0 and 2.6.1. We've fixed the failure to send daily digest email notifications. (This problem occurred when the Confluence instance contained draft pages.) This release also contains some improvements in the wiki's support of internationalisation. And you'll be delighted to see that the plus and minus buttons are back, next to the 'Recently Updated' section of the Dashboard – so you can now increase or decrease the number of items you see in that section. There's a complete list of fixes below. You can download Confluence 2.6.2 from the download centre. ### Upgrading from a previous version of Confluence Upgrading Confluence should be fairly straightforward. Please read the upgrade instructions. We strongly recommend that you back up your `confluence.home` directory and database before upgrading! ### Updates and fixes in this release Errors were reported by the JIRA trusted connection. APP_UNKNOWN; Unknown Application: {0}; ["confluence:4557196"]
JIRA Issues (26 issues)
Type | Key | Summary | Priority | Status | Resolution
--- | --- | --- | --- | --- | ---
| CONF-10042 | log4j references ConfluenceHomeLogAppender class that does not exist in 2.6.1 |  | Resolved | Fixed
| CONF-10008 | Document bordercolor attribute on wiki markup for images |  | Resolved | Fixed
| CONF-9975 | error saving new or existing documents when using the Rich Text Editor |  | Resolved | Fixed
| CONF-9890 | Typo in the Wiki Notation guide - {{monspaced}} |  | Resolved | Fixed
| CONF-9877 | CustomCJKAnalyzer does not work with JDK 1.6 |  | Resolved | Fixed
| CONF-9873 | Concurrent Modification Exception caused when accessing a space in clustered version of Confluence |  | Resolved | Fixed
| CONF-9866 | Replace System.out, System.err and printStackTrace references with logging |  | Resolved | Fixed
| CONF-9807 | On the Administrators page e-mail addresses are shown "mailto:user@domain.com" instead of "user@domain.com" |  | Resolved | Fixed
| CONF-9804 | Move the XFire dependency for Crowd from 1.2.1 to 1.2.6 |  | Resolved | Fixed
| CONF-9803 | Open source Confluence system and bundled plugins |  | Closed | Fixed
| CONF-9781 | Duplicate Webwork JAR in Confluence 2.6-stable |  | Resolved | Fixed
| CONF-9773 | Image thumbnail links on dashboard recently updated don't use context path in URL |  | Resolved | Fixed
| CONF-9771 | NullPointerException when exporting space on Websphere and JBoss |  | Resolved | Fixed
| CONF-9770 | Recent Changes on dashboard doesn't display plus/minus buttons to resize list |  | Resolved | Fixed
| CONF-9701 | Daily report job not being generated when using drafts |  | Resolved | Fixed
| CONF-9659 | PDF space export failing in Resin 3.x due to incorrect handling of HttpServletRequest |  | Resolved | Fixed
| CONF-9350 | Numerous XSS Type 2 vulnerabilities in macros bundled with Confluence |  | Resolved | Fixed
| CONF-9299 | Tiny Link can generate URLs ending with punctuations (which outlook doesn't like) |  | Resolved | Fixed
| CONF-9258 | Incorrect search results for single and double-byte Japanese strings |  | Resolved | Fixed
| CONF-9238 | Annonymous group loses view permission |  | Resolved | Fixed
| CONF-8495 | "Find Groups" Popup not working in IE |  | Resolved | Fixed
| CONF-7750 | extractBundledPlugins Found atlassian-bundled-plugins.zip, but failed to read file |  | Resolved | Fixed
| CONF-7680 | Non-internationalised UI text in comments and space rss links |  | Resolved | Fixed
| CONF-7601 | Images produced by macro plugins like Gliffy are not generated into .doc or .html exports |  | Closed | Fixed
| CONF-7362 | captcha.response.empty key given when user cancels |  | Resolved | Fixed
| CONF-3427 | PDF export doesn't handle {color} tag properly |  | Resolved | Fixed

Document generated by Confluence on Nov 05, 2009 23:29