You are here: TWiki>

Known Issues of TWiki 4.2.x Production Releases

The latest TWiki release is available at DownloadTWiki.

Security Alerts

Security Alert: Cross-site request forgery vulnerability with image tag
- Fix available in SecurityAlert-CVE-2009-1339, fixed in TWiki 4.3.1
Security Alert: TWiki SEARCH variable allows arbitrary shell command execution
- Fix available in SecurityAlert-CVE-2008-5305, fixed in TWiki 4.2.4
Security Alert: Cross-site scripting vulnerability with TWiki URLPARAM variable
- Fix available in SecurityAlert-CVE-2008-5304, fixed in TWiki 4.2.4
Security Alert: Arbitrary Code Execution in Configure Script
- Fix available in SecurityAlert-CVE-2008-3195, fixed in TWiki 4.2.3

Fixed in	Description
	none

Fixed in	Description
	none

Fixed in	Description
TWiki-4.2.4	TWikibug:Item5922 - $formfield() not displayed in formatted searches for hidden fields

Fixed in	Description
Pending Firefox fix	Preview has been disabled when using Wysiwyg editor because users of Firefox experience a bug in Firefox which means that they loose all they edited when they hit the back button of the browser. We regard this as a minor issue because preview is not really needed when you edit with Wysiwyg. Preview still works in Raw Edit mode. Firefox 3 did not resolve this issue so it is not likely that preview is reintroduced in a near future
TWiki-4.2.3	TWikibug:Item5939 - Rogue <p /> below </html> on every topic in every web
TWiki-4.2.4	TWikibug:Item5967 - `viewfile` partly broken

Fixed in	Description
TWiki-4.2.3	TWikibug:Item5993: configure image loading code is too liberal.

Fixed in	Description
TWiki-4.2.2	TWikibug:Item5892 - Registration with verification fails in 4.2.1

Fixed in	Description
TWiki-4.2.2	TWikibug: Item5643 - REVINFO with web specified in topic param renders as though topic does not exist
TWiki-4.2.2	TWikibug:Item5887 - TWiki::Compatibility has undefined variable error
Pending Firefox fix	Preview has been disabled when using Wysiwyg editor because users of Firefox experience a bug in Firefox which means that they loose all they edited when they hit the back button of the browser. We regard this as a minor issue because preview is not really needed when you edit with Wysiwyg. Preview still works in Raw Edit mode. Firefox 3 did not resolve this issue so it is not likely that preview is reintroduced in a near future

Fixed in	Description
TWiki-4.2.1 or CPAN CGI 3.38	If you install TWiki on a very new Linux distribution you may find the error `Use of uninitialized value $filename in substitution (s///) at (eval 41) line 23`. The error is not in TWiki but in the CPAN library called "CGI" which is part of the default Perl. At least CGI version 3.37 is known to be broken. The fix is to upgrade this library to 3.38 or higher. See Bugs:Item5727 which also describes how to upgrade the library
TWiki-4.2.1	TWikibug:Item5287 - The link feature in the Wysiwyg editor does not work with internal links and in some cases disable the save button or data entered is lost when you save. There is already a fix for this. You can upgrade WysiwygPlugin and TinyMCEPlugin and this problem is fully resolved. If done from configure this can be done by an admin from a browser and takes two minutes. See HowToUpgradeExtensionsWithConfigure
TWiki-4.2.1	TWikibug:Item5307 - Plugins with beforeAttachmentSaveHandler break file attachments. Public TWiki sites that depend on the BlackListPlugin should upgrade to TWiki 4.2.1

Fixed in	Description
TWiki-4.2.1	TWikibug:Item4946 - urlDecode() not working for characters represented by Unicode code points. We are looking for unicode experts to help fixing and testing.
TWiki-4.2.1	TWikibug:Item5135 - EditTablePlugin must disable initsort when editing table TABLE tag to work with new move row feature. Work around is to place the EDITTABLE tag before the TABLE tag
TWiki-4.2.1	TWikibug:Item5118 - Difference from 4.1.2 - 4.2: Apache loginname no longer works with access control lists
Pending Firefox fix	Preview has been disabled when using Wysiwyg editor because users of Firefox experience a bug in Firefox which means that they loose all they edited when they hit the back button of the browser. We regard this as a minor issue because preview is not really needed when you edit with Wysiwyg. Preview still works in Raw Edit mode. Preview may return later in an improved version when we have found a way to work around the Firefox bug

Please visit the bugs web to review and report bugs.

Found a bug? Fill in a report in the bugs web.

Need support? Ask your questions in the Support web, but only after reviewing the support guidelines :-)

BasicForm
TopicClassification	TWikiDeployment
TopicSummary
InterestedParties
RelatedTopics	TWikiProductionReleases, FreetownRelease, TWikiRelease04x02x01, TWikiSecurityAlerts, TWikibug:WebHome

Topic revision: r20 - 2009-04-29 - 14:51:50 - PeterThoeny