The core development team is proud to announce the availabilty of Zikula Core 1.5.4.

Zikula Core 1.5.4 is available as of today, 16 December, 2017.

• BC Breaks:

  • CSRF tokens are now different for HTTP and HTTPS (#3856). See http://symfony.com/blog/cve-2017-16653-csrf-protection-does-not-use-different-tokens-for-http-and-https for more information.

• Fixes:

  • Use display name in category selection form type (#3828).
  • Provide showRegistryLabels option in category selection form type to show a label for each single selector based on the base category assigned in the corresponding registry.
  • Corrected Category API to properly get the category by path (#3852).
  • Disabled CSRF protection for search results (#3831).
  • Allowing audio files with the .mp3 and .wav extensions to be accessible via the modules and themes folders. (#3858).
  • Fixed logical issue in Users module's mass mailing helper (#3863).
  • Fixed potential problems with invalid (legacy) hook bundles (#3866).
  • Fixed wrong deletion of Theme variables (#3857).