Summary & Highlights

Welcome to Linchpin Essentials 2.1!

The Linchpin Essentials 2.1 release focuses on various improvements.

We prepared a short summary of the most important changes, so you can keep track of them. If you want more info about a specific function, use the navigation to jump to this function's release notes.

Linchpin Theme allows you to tab through the header, the navigation menus and the page content now. We also worked on improving the app's performance and thus made some changes to caches.

We improved the performance of Linchpin User Profiles - the "Profile" macro should load better when used multiple times on the same page. We also tweaked the caching and some profile settings.

Linchpin Theme

We worked on improving the app's performance. Furthermore, we improved the navigation via keyboard - you can tab through the header, the navigation menus and the page content now.

Changes

• Since Linchpin Theme is only available as part of the Linchpin Intranet Suite and Linchpin Essentials for a while now, we removed APIs which were no longer needed (e. g. license API). c

Improvements

• We optimized the caching of the Linchpin Theme child app and its components.
• We improved the navigation via keyboard. Now, you can tab through header elements, navigation elements and page content. In this order.
• We did some general clean-up. 🧹

Bugfixes

• We fixed a bug regarding a non-closing sidebar after a contact search was performed.
• We fixed a bug which wouldn't let you perform a search within the space directory. We also rephrased the error message.
• We fixed a bug which caused links within the editor to be displayed in wrong colors.
• We fixed a bug within the admin view of Linchpin Theme which made troubleshooting harder.
• We fixed menu cache invalidation issues.

Linchpin User Profiles

We improved the performance of the app. To do that, we improved the caching, worked on the "Profile" macro und various other things.

Improvements

• We improved the performance of the "Profile" macro, especially when multiple macros are used on the same page.
• We improved the caching by removing unneccessary caches and increasing the life span of a cache to 24 hours.
• The "Custom User Search" macro can handle the fact that profile fields used as filters should not necessarily be displayed in the search as well now.
• We improved the handling of data sources within user profiles to prevent inconsistencies in profile field configurations.
• We made the naming of charts in admin view and within the people directory more consistent.

Bugfixes

• The "Org Chart" macro can be used on pages with other macros like the "Profile" macro or the "Customized User List" macro now.
• We resolved the issue regarding failing syncs when an MS Active Directory is being used. The MS Active Directory overwrites Linchpin User Profiles settings. That's why we disabled the option within Linchpin User Profiles when an affected software version is being used and instead added a help text explaining how to configure the sync in Confluence.
• We fixed a bug which made it possible to use hidden profile fields to configure structural charts which resulted in empty nodes being displayed.
• We fixed a bug which prevented profile pictures from being deleted properly.
• Within the structural chart, users belonging to a node were cached too aggressively. We fixed that.
• We fixed a bug which rendered the link to instant messangers within the people directory incorrectly.
• We fixed a bug which caused links of dependant fields be displayed even though they weren't.

Communicator

We fixed a bug which caused issues with navigation menus.

Changes

• We made changes to the cache of the Linchpin Communicator. It caused issues with navigation menus, these should be fixed with this change.

Complete changelog

Here is a complete overview of all of the changes that we've implemented in our Linchpin Essentials release.

Security

• 2.1.1 We closed a potential scripting attack vector in the "Teaser" macro.
• 2.1.1 We fixed a a vulnerability (found during the internal security audit) which potentially allowed to inject executable code within the phone profile field and linked text profile fields.
  More info: https://info.seibert-media.net/x/FgCMB
• 2.1.1 Our Linchpin User Profiles app is part of Atlassian's BugBounty program now.
• 2.1.3 We have found and fixed potential security vulnerabilities in different views of user profile data.
  Read more on that in our security advisories: https://seibert.biz/20211118cvelupxss & https://seibert.biz/20211118cvelupxss2
• 2.1.4 Linchpin Theme: We fixed a vulnerability which potentially allowed a Confluence administrator to upload a malicious XML file.
  More info: https://seibert.biz/20211210cveltpxxe
• 2.1.4 Linchpin User Profiles: We fixed a vulnerability which potentially allowed a Confluence administrator to upload a malicious XML file.
  More info: https://seibert.biz/20211210cvelupxxe

Changes

• Since Linchpin Theme is only available as part of the Linchpin Intranet Suite and Linchpin Essentials for a while now, we removed APIs which were no longer needed (e. g. license API).
• We made changes to the cache of the Linchpin Communicator. It caused issues with navigation menus, these should be fixed with this change.

Improvements

• We optimized the caching of the Linchpin Theme child app and its components.
• We improved the navigation via keyboard. Now, you can tab through header elements, navigation elements and page content. In this order.
• We did some general clean-up. 🧹
• We improved the performance of the "Profile" macro, especially when multiple macros are used on the same page.
• We improved the caching by removing unneccessary caches and increasing the life span of a cache to 24 hours.
• The "Custom User Search" macro can handle the fact that profile fields used as filters should not necessarily be displayed in the search as well now.
• We improved the handling of data sources within user profiles to prevent inconsistencies in profile field configurations.
• We made the naming of charts in admin view and within the people directory more consistent.
• 2.1.1 The "Content Responsibility" macro takes hidden profile fields into consideration and won't allow users to select or see such profile fields now.
• 2.1.2 We improved the search behaviour in the people directory, and also in the macros Custom User Search and Customized User List.
• 2.1.4 We ensured Linchpin Theme's compatibility with Confluence 7.15.
• 2.1.4 We improved the help text displayed during an LDAP write test.

Bugfixes

• We fixed a bug regarding a non-closing sidebar after a contact search was performed.
• We fixed a bug which wouldn't let you perform a search within the space directory. We also rephrased the error message.
• We fixed a bug which caused links within the editor to be displayed in wrong colors.
• We fixed a bug within the admin view of Linchpin Theme which made troubleshooting harder.
• We fixed menu cache invalidation issues.
• The "Org Chart" macro can be used on pages with other macros like the "Profile" macro or the "Customized User List" macro now.
• We resolved the issue regarding failing syncs when an MS Active Directory is being used. The MS Active Directory overwrites Linchpin User Profiles settings. That's why we disabled the option within Linchpin User Profiles when an affected software version is being used and instead added a help text explaining how to configure the sync in Confluence.
• We fixed a bug which made it possible to use hidden profile fields to configure structural charts which resulted in empty nodes being displayed.
• We fixed a bug which prevented profile pictures from being deleted properly.
• Within the structural chart, users belonging to a node were cached too aggressively. We fixed that.
• We fixed a bug which rendered the link to instant messangers within the people directory incorrectly.
• We fixed a bug which caused links of dependant fields be displayed even though they weren't.
• 2.1.1 The "Profile" macro won't display an empty white box anymore when there are no profile fields which could be displayed within it.
• 2.1.1 Very old pages shouldn't cause any problems anymore when the "Content Responsibility" macro is being used.
• 2.1.1 We fixed a bug which prevented the vCard to be displayed when hovering over elements within the "all updates" feed.
• 2.1.1 Empty date fields won't interrupt the LDAP sync anymore.
• 2.1.1 We made the navigation menus reappear for not logged-in and/or anonymous users when they're set to be visible for those users.
• 2.1.1 We fixed a bug which prevented space layout headers with a height of less than 140px to be displayed correctly.
• 2.1.1 When uploading a logo in the space layout configuration, the wording now correctly states that the logo will be used in the header area (and only there).
• 2.1.1 We fixed a bug regarding the column widths of the default theme.The default theme will be displayed correctly and as set now.
• 2.1.1 We fixed a license state caching error in Custom Landing Spaces.

• 2.1.2 We fixed the LDAP sync overwriting uninvolved fields.

• 2.1.2 We fixed link color in the editor.

• 2.1.2 We fixed an issue with favourite pages that remain in sidebar after deletion.

• 2.1.2 We fixed unwanted empty space between page title and breadcrumb navigation when scrolling pages.

• 2.1.3 We fixed the filtering in "Custom User List" macro configuration. No problems should occur anymore when multiple filters are in use.

• 2.1.3 We fixed the profile field dependency to confluence groups.

• 2.1.3 We improved the search within the People Directory, it allows double quotes usage now.

• 2.1.3 The filter in the "Custom User Search" macro filters "exactly" instead of "fuzzy" now.

• 2.1.3 The subline for tile view within the People Directory can be changed now.

• 2.1.4 Images in "Teaser" macros update automatically when the corresponding attachments get updated now.
• 2.1.4 We fixed a bug which caused a second search icon to be displayed in the header area of the theme.
• 2.1.4 We implemented an exception handling to prevent rollback of all user data changes in the LDAP sync if an avatar attachment could not be removed due to a bug in Confluence.
• 2.1.4 VCards are displayed correctly when hovering over an @-mention now.
• 2.1.4 We fixed fthe ilter alignment in the "Custom User Search" macro.
• 2.1.4 We fixed a bug which prevented anonymous users from seeing profile data within a VCard, even though they had the necessary permissions to view such data.
• 2.1.4 We fixed a bug which prevented profile fields to be moved to the left column in the configuration.
• 2.1.4 We fixed the display of the profile header field subline in the "My contacts" macro and the sidebar module. The bug occurred when dynamic linking was being used in the profile header field.
• 2.1.4 We fixed a bug which caused the subline of the profile header field to be always displayed in the people directory, even when the configuration should prevented it from being displayed.
• 2.1.4 We fixed a bug which caused the "Profile" macro to be missing information when used in a "Page Property" macro.

Linchpin Essentials 2.1.1

Version 2.1.1 of Linchpin Essentials is a patch release. It contains some security patches for potential vulnerabilities which we found during internal testings and mainly bugfixes.

Security

• We closed a potential scripting attack vector in the "Teaser" macro.
• We fixed a a vulnerability (found during the internal security audit) which potentially allowed to inject executable code within the phone profile field and linked text profile fields.
  More info: https://info.seibert-media.net/x/FgCMB
• Our Linchpin User Profiles app is part of Atlassian's BugBounty program now.

Improvements

• The "Content Responsibility" macro takes hidden profile fields into consideration and won't allow users to select or see such profile fields now.

Bugfixes

• The "Profile" macro won't display an empty white box anymore when there are no profile fields which could be displayed within it.
• Very old pages shouldn't cause any problems anymore when the "Content Responsibility" macro is being used.
• We fixed a bug which prevented the vCard to be displayed when hovering over elements within the "all updates" feed.
• Empty date fields won't interrupt the LDAP sync anymore.
• We made the navigation menus reappear for not logged-in and/or anonymous users when they're set to be visible for those users.
• We fixed a bug which prevented space layout headers with a height of less than 140px to be displayed correctly.
• When uploading a logo in the space layout configuration, the wording now correctly states that the logo will be used in the header area (and only there).
• We fixed a bug regarding the column widths of the default theme.The default theme will be displayed correctly and as set now.
• We fixed a license state caching error in Custom Landing Spaces.

Linchpin Essentials 2.1.2

Version 2.1.2 of Linchpin Essentials is a patch release. It contains bugfixes and improvements.

Improvements

• We improved the search behavior in the people directory and the macros "Custom User Search" and "Customized User List".

Bugfixes

• We fixed the LDAP sync overwriting uninvolved fields.

• We fixed the link color within the editor.

• We fixed an issue with favorite pages that remained in sidebar after deletion.

• We fixed unwanted empty space between page title and breadcrumb navigation when scrolling through pages.

Linchpin Essentials 2.1.3

Version 2.1.3 of Linchpin Essentials contains a security patch and bugfixes.

Security

• We have found and fixed potential security vulnerabilities in different views of user profile data.
  Read more on that in our security advisories: https://seibert.biz/20211118cvelupxss & https://seibert.biz/20211118cvelupxss2

Bugfixes

• We fixed the filtering in "Custom User List" macro configuration. No problems should occur anymore when multiple filters are in use.

• We fixed the profile field dependency to confluence groups.

• We improved the search within the People Directory, it allows double quotes usage now.

• The filter in the "Custom User Search" macro filters "exactly" instead of "fuzzy" now.

• The subline for tile view within the People Directory can be changed now.

Linchpin Essentials 2.1.4

Release 2.1.4 of Linchpin Essentials contains a security patch and bugfixes. Furthermore, Linchpin Theme is compatible with Confluence 7.15 now.

Security

• Linchpin Theme: We fixed a vulnerability which potentially allowed a Confluence administrator to upload a malicious XML file.
  More info: https://seibert.biz/20211210cveltpxxe
• Linchpin User Profiles: We fixed a vulnerability which potentially allowed a Confluence administrator to upload a malicious XML file.
  More info: https://seibert.biz/20211210cvelupxxe

Improvements

• We ensured Linchpin Theme's compatibility with Confluence 7.15.
• We improved the help text displayed during an LDAP write test.

Bugfixes

• Images in "Teaser" macros update automatically when the corresponding attachments get updated now.
• We fixed a bug which caused a second search icon to be displayed in the header area of the theme.
• We implemented an exception handling to prevent rollback of all user data changes in the LDAP sync if an avatar attachment could not be removed due to a bug in Confluence.
• VCards are displayed correctly when hovering over an @-mention now.
• We fixed fthe ilter alignment in the "Custom User Search" macro.
• We fixed a bug which prevented anonymous users from seeing profile data within a VCard, even though they had the necessary permissions to view such data.
• We fixed a bug which prevented profile fields to be moved to the left column in the configuration.
• We fixed the display of the profile header field subline in the "My contacts" macro and the sidebar module. The bug occurred when dynamic linking was being used in the profile header field.
• We fixed a bug which caused the subline of the profile header field to be always displayed in the people directory, even when the configuration should prevented it from being displayed.
• We fixed a bug which caused the "Profile" macro to be missing information when used in a "Page Property" macro.