Zikula Core 2.0.14 released!

November 13, 2019


The core development team is proud to announce the availabilty of Zikula Core 2.0.14.

Zikula Core 2.0.14 is available as of today, 13 November, 2019.

  • Security fixes from Symfony:

    • Use constant time comparison in UriSigner (CVE-2019-18887).
    • Prevent argument injection in a MimeTypeGuesser (CVE-2019-18888).
  • Fixes:

    • Improved setting meta data for start page settings (#3929, #3932).
    • Clear cache after changing active authentication methods (#3936).
    • Prevent exception caused by modification of uninitialised extensions.
    • Fixed invalid reference to "use compression" option in general settings form.
    • Escape groups table name since it became a reserved word in MySQL 8.
    • Improved input value checks for yesNo Twig filter.
    • Dynamically determine available locales from locale api in custom locale form type.
    • Increased amount of letters for top level domains in email address validation pattern (#3980).