Known Issues of TWiki Production Release 01 Sep 2001

These are known issues of the TWiki 01 Sep 2001 production release.

Security Alerts

• Security Alert: Secure webserver to prevent script execution of uploaded files (CVE-2006-3336)
  • Fix available in SecurityAlertSecureFileUploads, fixed in TWikiRelease04x00x04
• Security Alert: TWiki INCLUDE function allows DoS attack on itself
  • Fix available in SecurityAdvisoryDosAttackWithInclude and in TWikiRelease04x00x02
• Security Alert: TWiki history function allows arbitrary shell command execution
  • Fix available in SecurityAlertExecuteCommandsWithRev
• Security Alert: TWiki search function allows arbitrary shell command execution
  • Fix available in SecurityAlertExecuteCommandsWithSearch

• Note: See other TWikiSecurityAlerts

Major Issues

• RenameKillsAttachmentsAndFormsBug: Rename not safe as attachments and form data can be lost
  • Fix available
• On Win2k - UploadZeroFileSizeWin2KBug: file upload fails

Major Browser Issues

• BackFromPreviewLosesText: IE5 and IE6 only - novice users in particular may lose edits in some situations, due to an IE5 caching problem
  • Fix available, see BackFromPreviewLosesText
• RefreshEditPage: various browsers including Opera and IE5 - the second Edit in a session may use out-of-date text, losing the first set of edits without any warning
  • Fix available, see RefreshEditPage

Minor Issues

• SearchsTooManyDirectories: Search.pm searches directories that start with '.' and '_'
  • Workaround available
• EmptyNotificationAfterRenamingTopic: "Referring pages" get marked as changed when a referred page is renamed / moved
• ViewShowsTopRevUserForOlderRevs: View of older topic revision shows user nama and time stamp of top revison
  • Fix available
• WhyDoLinesComeOutDoubleSpaced. This is a problem for KFM, see KfmBrowserSupportForEditing
  • not sure if it affects only servers on Windows (didn't read enough -- rhk)
• CharacterEntity: foreign characters are no longer displayed properly (e.g., German characters with umlaut, etc.)
• FixingTopicChangesUser: Undocumented command to fix a topic alters time stamp and user
• TWikiFormsDiffRendering: When you do a diff on a TWikiForms page, you get the raw METAFIELDS
• OsDetectionFailsOnMacOSX: On MacOSX the server OS is incorrectly determined to be "WINDOWS", which causes failures in (at least) the RCS interface
  • Fix available
• VerbatimExpandsVariables
  • Fix available
• NestedVerbatimTags
  • Fix available
• LostEditsWithoutAuthentication: if you allow multiple people to edit using the TWikiGuest account then it is possible to lose changes.
  • Ensure that people log-in.

Upgrade Issues

• CategoryTableToTWikiFormConversionBug: Existing category table data not properly converted to form data.
  • Workaround available

Other Notes

• BrowserIssues: Known browser issues with work arounds
• BrowserFormattingIssues: Known browser formatting issues
• DocumentationBug01: Documentation sometimes refers to "TWikibeta". Workaround available
• TWikiFormsHelp: Variables do not get expanded in forms
• ViewRawAndLockedTopics -- one (or more?) of the oops displays refers to "view raw" which has been moved off the bottom "toolbar" and moved under the "more". (Someday I'll rewrite this in english

-- PeterThoeny - 15 Sep 2001

I guess I'm getting carried away here. I don't want to list every bug or support question in the release, because I think that would be misleading. On the other hand, I think it's fair for people to know what to expect when they install or upgrade to this release. Maybe I should (after I learn how) make a general reference to the appropriate category (field) of bugs.

-- RandyKramer - 21 Sep 2001

It would be useful to link to this from Support.WebHome, as with other releases.

-- RichardDonkin - 23 Sep 2001

I've taken the liberty to do so.....

-- HansDonner - 24 Sep 2001

Maybe in Support and Codev we should add a new category value something like "Support.NewIssueWith20010901Release" (maybe it's already there -- I'll have to look). Maybe it should even be a new formfield so that bugs can be classified with all the old classifications, and in addition, possibly be marked as an issue "new with 20010901". Then we could have a page that automatically displays all the topics under that classification.

-- RandyKramer - 29 Sep 2001

Given that we have major issues, would it be prudent to release a new version?. 1st October is not very far away....

-- MartinCleaver - 30 Sep 2001

We plan now to have a 01 Nov 2001 release. This will include mainly bug fixes and improved documentation. Some minor feature enhancements might go into this release as well. The 01 Nov 2001 release might be released earlier, like in mid October.

-- PeterThoeny - 05 Oct 2001

I've added a new category, Major Browser Issues, intended to capture any browser problems that may cause the loss of data input by the user. Both the issues in this category relate to loss of data while editing - they are not new to the Sept 2001 release, but they are now much better understood, there are some workarounds and fixes that are applicable. Hope this is OK - I would like to see a bit more focus on these browser issues, since I have seen them cause a new TWiki user to lose their carefully composed text.

-- RichardDonkin - 05 Nov 2001

I've added the LostEditsWithoutAuthentication issue.

-- MartinCleaver - 06 Nov 2001