The core development team is proud to announce the availabilty of Zikula Core 2.0.14.

Zikula Core 2.0.14 is available as of today, 13 November, 2019.

• Security fixes from Symfony:

  • Use constant time comparison in UriSigner (CVE-2019-18887).
  • Prevent argument injection in a MimeTypeGuesser (CVE-2019-18888).

• Fixes:

  • Improved setting meta data for start page settings (#3929, #3932).
  • Clear cache after changing active authentication methods (#3936).
  • Prevent exception caused by modification of uninitialised extensions.
  • Fixed invalid reference to "use compression" option in general settings form.
  • Escape groups table name since it became a reserved word in MySQL 8.
  • Improved input value checks for yesNo Twig filter.
  • Dynamically determine available locales from locale api in custom locale form type.
  • Increased amount of letters for top level domains in email address validation pattern (#3980).