Version 15.0 Patches

 

Version 15.0.9 Patch Notes 

Patch Highlights

• CK Editor updated
• Improved Search indexing

Note: This patch release is for supported browsers Chrome, Firefox, and the new Edge (Chromium). All versions of Microsoft IE (11 and below) will encounter layout problems and are not supported.

If you are seeing messages about web services not connecting, or cannot obtain expiry information on your admin page, you'll also need to apply the ws.icthrive.com certificate to Lucee for web services to connect.

1) Navigate to the Lucee Server Administrator by going to HTTP://YOURSITENAME/Lucee/admin/server.cfm 
- Please contact Support for the default password 
2) Choose SSL Certificates under Services 
3) Enter ws.icthrive.com into the Host field. The port is 443 
4) Click install. 
5) Reboot the intranet server, which is required for the ws.icthrive.com cert to become active 

CK Editor (Message Box field/widgets)

• HTML editor for rich text fields (CK Editor) has been updated to fully replace Flash and prevent vulnerabilities.

Note: This rich-text editor is found in all applications of the software and may change the behavior of some of your content, it is recommended to test the patch on a test site if possible before applying to production environments.

Document

• Fixed: Subscription Details and Item Security links not working from admin hover menu in apps.

Errors & Logging 

• Errors and Logging page sets log levels for Modern (toolbar and storyboard) and Search applications correctly. 

Search

• Improved Indexing page to highlight where indexing errors occur in addition to showing how items were successfully indexed in each app.
• Indexing errors are logged and can be downloaded as a log file on the Site Search screen to be provided to Support.

Storyboard

• Fixed: JavaScript error occurs when a user edits an image story with no image. 
• The storyboard button for the admin toolbar now shows up only on the homepages for each site. 

Toolbar

• Fixed: If no global navigation items (mega menu) exist, the admin toolbar disappears if you click the theme button on the admin toolbar.
• Fixed: Clicking 'Delete Employee' from the admin toolbar hover menu doesn't delete the employee profile.
• Fixed: Toolbar is missing when a user clicks a link to the intranet from an external source.

 

Version 15.0.8 Patch Notes 

Patch Highlights

• Several fixes and improvements related to search
• Permission and Elevated rights issues solved

Active Directory

• Active Directory synchronization password is now encrypted in HTML source

EWS

• Fixed error in Exchange web services scheduled process

Forms

• Fixed thumbnail images for employees with pictures in Workflow Additional Approval Managers

Search

• Fixed Search filters and tabs:
  • Filter by Blog, Job Center, Online Forms and Staff Directory application
  • Site and date filter using the Pages tab in the global search
  • Search Tools App selection for Documents apps
  • Global search results with Documents tab combined with a specific app
• Blog posts now individually updated in search after publish, edit or delete actions

Security

• Advertising setting for sites is being respected when pages are published
• Directory tab on the Admin page is not available to a user with only Employee Manager elevated right
• Fixed permission issues in the admin area
  • Storyboard editing rights cascade from site ownership
  • Storyboard editing rights can be individually specified
  • Administration area tabs respect each elevated right

Widget

• Portrait images taken with mobile devices are not rotated to landscape

 

Version 15.0.7 Patch Notes 

Patch Highlights

• Several fixes and improvements related to search
• Resolved issues with Storyboard order and updates
  • See below for additional improvements added for Storyboard
• "Page will be reloaded" prompt has been removed

Scheduled Tasks

• Scheduled tasks port assignment: Scheduled tasks working on non-default ports
• Fixed a service error on scheduled task related to Reach Integration

Search

• Rebalanced the search result order, prioritizing the title field and multiple keyword matches
• Search auto-suggest now displays the first name and last name of the suggested employee
• Search indexing now includes content from applications that were missing the template type in the database

Security

• All hidden form input fields storing values from http requests are now encoded to prevent reflection attacks
• All cookies (Secure and HttpOnly properties) are now managed through a consolidated service
• Fixed error when posting new articles as a regular user with no permission to Add to a specific folder

Storyboard

• Enhanced image add functionality to now include cropping and image resizing when adding and editing stories
• Resolved story reordering issues
• Added check for stories missing an order number which will put these stories in Draft mode
• Save/Publish button will be disabled while the request is pending response on Storyboard
• Removed link requirement for stories using video upload
• "Page will be reloaded" prompt has been removed

 

Version 15.0.6 Patch Notes 

Patch Highlights

• Several fixes and improvements related to search
• Fixed Read and Confirm issues with Employee dashboard and widget
• Improvements in security relating to XSS and HSTS

Note: This patch release is for supported browsers Chrome, Firefox, and the new Edge (Chromium). All versions of Microsoft IE (11 and below) will encounter layout problems and are not supported.

Dashboard

• Fixed issue where Employee’s Read & Confirm dashboard showed unconfirmed items under the wrong heading 

Form

• Fixed rendering issues in email and PDF for form responses 
• Fixed error when submitting form response for SSL-enabled intranet on a mobile device 

Search

• Search results no longer show previous versions of uploaded documents in search results
• Fixed issue where search results displayed items that had been deleted
• Preview feature on search is now available for Training Calendar items
• Fixed issue where item appeared twice in results if it had a file upload
• Fixed security issue where secured items appeared in search results
• Fixed inconsistencies on pagination for query-less searches with filters applied
• Search results now allow the use of filters (e.g. Documents, Forms, People, etc) and Search tools
• Added phrase search for exact matches when search phrase wrapped in quotation marks

Security

• Improved handling of code to address XSS vulnerabilities
• Added HTTP Strict Transport Security (HSTS) Header for SSL (HTTPS) Intranets
• Regular users who add a photo are now able to edit it  
• Fixed permission issue with Training Calendar session control

Toolbar

• Product Updates in the toolbar now displays only the current version's latest patch

Widget

• Fixed issue where secured content on a secured site was displayed for all users
• Read and Confirm widget showing up for users with pending Read and Confirm items

 

Version 15.0.5 Patch Notes 

Patch Highlights

• Replaced Flash player dependency and replaced with HTML5 player
• Fixed PDF export display problems
• Improvements to Search results
• Fixed missing thumbnail images for employee pictures in the Employee Directory

Note: This patch release is for supported browsers Chrome, Firefox, and the new Edge (Chromium). All versions of Microsoft IE (11 and below) will encounter layout problems and are not supported.

Admin

• Fixed folder tree not showing if Lucee Whitespace management is not on Smart whitespace management
• Changed media embed function to output HTML 5 video code instead of Flash
• Fixed issue with Help Center link

Directory

• Fixed missing thumbnails for employees with pictures in Employee Directory search results

Formbuilder

• Fixed form PDF export showing workflow in small print
• Fixed form response PDF export checkbox, radio button, and content field display problems
• Added optimization to improve form performance with heavy workflow processes
• Fixed issue where TomTom directions pop-up remains above map.

Menu

• Editing links within top global nav results in a 200 ajax error

Search

• Improved Search accuracy by eliminating fuzziness from Elasticsearch queries
• Expanded searchable fields in filtered queries
• Fixed issue where site and Application content remains in search after "global search enabled" is turned off.
• Fixed text wrapping issue in search results

 

Version 15.0.4 Patch Notes 

Patch Highlights

• Updates TomTom Mapping APIs for mileage calculation field
• Fixed several Search issues
• Fixed several Active Directory issues

Note: This patch release is for supported browsers Chrome, Firefox, and the new Edge (Chromium). All versions of Microsoft IE (11 and below) will encounter layout problems and are not supported.

Active Directory

• Ensured that Active Directory Domain is listed only once in the logs and fixed an issue that was preventing disabled logins from being synced properly
• Improved Active Directory Synchronization performance
• Fixed an issue where AD was failing to sync when the LastSyncDateTime property was null

Formbuilder

• Upgraded the TomTom Mapping APIs used by the mileage calculator field

Reach Integration

• Prevented empty lists from being sent to the Reach Public API

Search

• Fixed an issue where some application fields where not indexed for search

Security

• Fixed a user session management issue that prevented users from signing in

Webservices

• Fixed incorrect maintenance expiry date
• Fixed an error that prevented the download of patches

 

Version 15.0.3 Patch Notes

Patch Highlights

• Resolved issues deleting Sites
• Updates to Reach integration
• Addressed Search issues
• Changed the number of Web Service calls to improve performance

Note: This patch release is for supported browsers Chrome, Firefox, and the new Edge (Chromium). All versions of Microsoft IE (11 and below) will encounter layout problems and are not supported.