CM1-5.3-SR1-20180315-Patch

Patch ID - 5315_20180315

This is a cumulative patch for CM1 5.3 SR1 that includes defect corrections & minor enhancements. This patch includes an Uninstall option to support rollback in the event the Patch introduces a problem or issue. The patch may be downloaded from the Support portal.  For instructions on Installing or Uninstalling the Patch, please review the Patch Readme file.  An updated list of Known Issues can be found at the bottom of this page. 

This is a culmulative patch that includes all of the improvements delivered in previous patches for the 5.3 SR1 version.  For details on what was included in previous Patch updates, please see the release notes for prior patches.  Links to prior patch Release Notes are provided below:

Improvements in this Patch

This patch includes a couple of issues that did not make the cut for the prior patches and late breaking corrections for customer reported issues.

Security

TLS 1.2 is now enabled for both the DTS and CM1 by default.  TLSv1 has not been disabled at this patch level, but will be retired in the 5.4 release, and/or in a future 5.3 patch.  This patch will update the DTS http and https connectors in the conf/server.xml file with a good security configuration for SSL as well as enabling compression. 

For system admins that may have customized their Http or Https connectors, and do not want Percussion to update the security settings, they may add a perc-no-update="true" attribute to each Tomcat Connector that they do not want updated prior to installing the patch, and the patch installer will skip those Connectors when the patch is applied. 

Performance

Improvements were made in the following areas:  Navigation, Publishing, and Site Management.   A new Layout property was added to the Navigation widget to limit the number of Navigation items returned at both starting and ending levels. 

RSS Feeds

Rss feed will now generate absolute links (instead of relative links) to images included in the Page Sumary when the canonical link feature is enabled. 

Blog List / Page Autolist / Result List Pagination

The Pagination feature has been updated to generate correct "link rel" tags while Paging to better support SEO.

Summary List of Issues Included in this Patch

1.  [CMS-2869] - Default File Extension is not applied to pages created by "Convert existing Folder" in Navigation Tree
2.  [CMS-3414] - Enable TLSv1.2
3.  [CMS-3536] - Incremental Publish Queue: queue gets stuck when item in queue is deleted
4.  [CMS-3582] - Error messsage when invalid path search
5.  [CMS-3607] - Page Auto List - Link target
6.  [CMS-3616] - Switching Between Sites With the Publishing Dialog Open Does Not Work
7.  [CMS-3625] - Broken link in approved shared rich text asset on template not displaying broken link icon in page preview 
8.  [CMS-3626] - Navigation related features degrade in performance with very deep or wide Site Navigation Trees creating delays of up to a minute in the UI - Pass #2
9.  [CMS-3754] - Parent Nav folder doesn't get removed when sections are removed
10. [CMS-3755] - Unable to delete External Link sections
11. [CMS-3756] - Events not populating in calendar 2.0 when setting 'events list' property
12. [CMS-3760] - Updating publish date at the end of main publish is slow and can cause DB deadlock
13. [CMS-3786] - NoSuchElementException shown in log instead of correct error message when requested item for assembly cannot be found
14. [CMS-3788] - Navigation Widget doesn't provide an option to limit the # of Navigation Entries for the Starting Level
15. [CMS-3792] - Bouncy Castle needs updated for latest TLS and SSH updates
16. [CMS-3801] - Copy Site / Delete Site Menu's Duplicated on Doubleclick of Site with Navigation Editor Open
17. [CMS-3808] - "Customized" Rich Text Editor Prompting for Name field as if it was a shared asset for new rich text local content
18. [CMS-3812] - Percussion runs as root user even when configured to run as percussion user if awk not found
19. [CMS-3813] - No error message if creating a section and a folder or section already exists with the same name
20. [CMS-3823] - Startup database fix to clean up broken navigation structures
21. [CMS-3831] - DTS server.xml https connector not being updated with compression / ssl protocols and ciphers when patched
22. [CMS-3824] - Startup database fix clear out deleted items from the Incremental queue
23. [CMS-3537] - In pagination the next buttons should have rel tag - Pagination Not Optimal for SEO
24. [CMS-3621] - RSS feature of Blog widget using relative path for blog images instead of an absolute path
25. [CMS-3623] - Implement Assembly Relationship Caching - for Performance
26. [CMS-3759] - Impove publish logging and add indication of end of publish
27. [CMS-3761] - Update database pub items more efficiently and individually during commit.
28. [CMS-3846] - Friendly error message not returned to user when License activation fails

Known Issue List

  • CMS-3614 - After applying the Patch end users may need to Clear their browser cache in the CM1 user interface in order to see the new changes to the Rich text Editor and plugins, ideally this should be automated. 
  • CMS-3389 - Customer using the secure sections feature will have problems starting the DTS after applying the patch.  They should contact technical support for a work around prior to attempting to patch their instance. 
  • CMS-3257 Customers using the MySQL database server as the backing database for the DTS, will lose the MySQL Connector jar if it was previously placed into the <InstallDir>/Deployment/Server/perc-lib directory.  To correct this problem the MySQL Connector for Java may be installed or symlinked into the <InstallDir>/Deployment/Server/lib directory.  Percussion does not include this connector as part of our installation due to license incompatibility issues.
  • CMS-3490 - Customers Patching the DTS on Windows Servers will need to reinstall the DTS Windows service by using the "<InstallDir>\Deployment\Server\bin\service.bat remove" and  "<InstallDir>\Deployment\Server\bin\service.bat install" commands.  Once the service has been successfully re-installed, the Percussion DTS Windows Service will correctly start. 
  • CMS-3280 -Customer's running the DTS on a server that also has native APR libraries installed, may run into problems starting the DTS HTTPS connector.   The HTTPS connector may fail to start with an invalid Keystore configuration.  To resolve this issue, remove or comment out the following line in the <InstallDir>/Deployment/Server/conf/server.xml file:

<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on"/>

e.g. 

<!-- <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on"/> -->.  Restarting the DTS after this change will resolve the APR related errors.