December 8th 2017

eZ announces the availability of 5.4.11, a maintenance release available for all users of eZ Publish Platform 5.4.

Update

Follow the 5.4.x Update Instructions to apply this update to your platforms.

Please note that from this release we recommend making two changes which have to be done manually since they affect the meta repository.

1. Prevent access to the website with direct usage of index.php in a URL (https://jira.ez.no/browse/EZP-27285)

This requires changes in your vhost rules. For Apache, add the rewrite rule before the final rule, like this:

For Nginx the corresponding change is:

2. The other recommended change is to install https://github.com/Roave/SecurityAdvisories. This prevents you from accidentally updating your dependencies to versions that contain unresolved security vulnerabilities.

The installation is as simple as:

composer require roave/security-advisories:dev-master

If an update would include an insecure release, this will instead result in a composer conflict with the Roave/SecurityAdvisories package.

Package Details

Package updates

Here are the ezsystems packages that have received an update as part of this release:

Updates and fixes in this release

Loading …

Key	Summary	T	Created	Updated
EZP-28343	eZ Publish Platform 5.4.11 release		Nov 30, 2017	Dec 07, 2017
EZP-28350	Make 5.4.11 release notes		Nov 30, 2017	Dec 08, 2017
EZP-27427	Improving performance of User Cache Generation		May 31, 2017	Jul 26, 2017
EZP-27738	name of field is not return in the "facet_fields" attribute of the ez find result info		Jul 22, 2017	Sep 26, 2017
EZP-27773	Database error while working with url aliases		Aug 11, 2017	Aug 28, 2017
EZP-27814	Add support for MySQL error codes in DB exceptions		Aug 29, 2017	Nov 08, 2017
EZP-27993	Support quality override by image alias		Sep 28, 2017	Dec 08, 2017
EZP-28005	Solr Bundle can sometimes exceed the allowed query size set by Java servers		Oct 03, 2017	Dec 18, 2018
EZP-28148	Object States Limitations perform a lot of lookups		Oct 27, 2017	Dec 18, 2018
EZP-28179	[5.4] Improve index command with support for selective indexing since date		Nov 03, 2017	Dec 18, 2018
EZP-25916	Clustering cache (eZDFS) can lead to database deadlocks (MySQL)		Jun 21, 2016	Jul 06, 2017
EZP-25922	kernel error 3 (not available) 404 errors are being cached		Jun 21, 2016	Apr 10, 2018
EZP-26013	Internal cache must be updated after restoration of trashed node		Jul 01, 2016	Aug 07, 2017
EZP-27091	eZ Demo: error when clicking on poll results		Mar 08, 2017	Aug 24, 2017
EZP-27097	Can't copy objects to an authorized location limited by policies		Mar 10, 2017	Aug 02, 2017
EZP-27171	Custom tag attribute values are double-encoded		Mar 30, 2017	Jul 25, 2017
EZP-27257	Changes to icon.ini size array could result in 'undefined index' error		Apr 17, 2017	Aug 01, 2017
EZP-27313	Deleting content redirects to system url instead of alias with a custom content.tree_root.location_id		Apr 26, 2017	Jun 06, 2017
EZP-27460	Solr index not updated when moving content with children		Jun 12, 2017	Jul 20, 2017
EZP-27474	Unable to add the same URL alias for other languages		Jun 14, 2017	Jul 05, 2017
EZP-27493	Typo in ezobjectrelationlisttype.php ($relList)		Jun 15, 2017	Aug 04, 2017
EZP-27528	Multiple StateGroup limitations in one policy combine with the "or" relationship instead of the "and" one		Jun 21, 2017	Aug 01, 2017
EZP-27551	Error while previewing content with new uploaded image		Jun 23, 2017	Nov 22, 2017
EZP-27593	Wrong POSIX locale code ru_RI		Jul 04, 2017	Jul 04, 2017
EZP-27714	Wrong variable name in eZTemplateMultiPassParser class		Jul 27, 2017	Jul 30, 2017
EZP-27735	Solr index not updated immediately after change content priority		Aug 01, 2017	Aug 25, 2017
EZP-27737	EZP-27427 breaks role loading		Aug 01, 2017	Aug 03, 2017
EZP-27791	User hash lookup request returns 404 when using Map/URI siteaccess matcher		Aug 22, 2017	May 29, 2018
EZP-27795	Notice thrown when declaring empty HTTP headers in Legacy		Aug 23, 2017	Sep 08, 2017
EZP-27944	Fatal error when trying to download files named with non-ASCII characters using BinaryStreamResponse		Sep 25, 2017	Jan 05, 2018
EZP-27996	"Remember me" doesn't retrieve the current user from Repository		Sep 29, 2017	Nov 28, 2017
EZP-28008	Make sure to clear remote id cache for ContentInfo on meta data updates		Oct 03, 2017	Apr 10, 2018
EZP-28122	Embedded content is still displayed after it is moved to trash		Oct 23, 2017	Nov 13, 2017
EZP-28157	Incorrect exception handling for lack of content/read permission for embed content		Oct 30, 2017	Feb 06, 2018
EZP-28174	Can't publish/save content with missing ezlocation URL		Nov 02, 2017	Dec 12, 2017

35 issues Refresh

<ac:structured-macro ac:name="jira" ac:schema-version="1" ac:macro-id="1777e069-c1b5-4541-ac1f-719e7347f504"><ac:parameter ac:name="server">eZ Systems JIRA tracker</ac:parameter><ac:parameter ac:name="columns">key,summary,type,created,updated</ac:parameter><ac:parameter ac:name="maximumIssues">1000</ac:parameter><ac:parameter ac:name="jqlQuery">project=EZP AND fixVersion in ( "5.4.11", "5.4.11-rc" ) ORDER BY issuetype DESC, key ASC </ac:parameter><ac:parameter ac:name="serverId">841cf523-cc54-30bc-bc5d-89e63192498a</ac:parameter><ac:parameter ac:name=": = | RAW | = :">server=eZ Systems JIRA tracker|columns=key,summary,type,created,updated|maximumIssues=1000|jqlQuery=project=EZP AND fixVersion in ( "5.4.11", "5.4.11-rc" ) ORDER BY issuetype DESC, key ASC |serverId=841cf523-cc54-30bc-bc5d-89e63192498a</ac:parameter><ac:parameter ac:name=": = | TOKEN_TYPE | = :">BLOCK</ac:parameter></ac:structured-macro>