Summary & Highlights

Welcome to Linchpin Intranet Suite 5.1!

This release of the Linchpin Intranet Suite focuses primarily on improvements of all kind. Which of course doesn't mean that we didn't take care of some bugs, too, or worked on new features!

We prepared a short summary of the most important changes, so you can keep track of them. To learn more about a specific topic, simply use the navigation to jump to that part of the release notes.

First of all, the Iconfont child app became obsolete with this release. You can delete it, if you wish to. It won't have any negative effect on your system.

Linchpin Mobile introduces a new feature: Support for videos hosted on Microsoft Stream. You can now play those in the Linchpin mobile app and the links will be resolved and rendered as playable videos. We also implemented a solution to display regular comments and inline comments separately.

Moving on to Linchpin User Profiles. We improved the caching of the app and worked on several more improvements, like performance improvements for the "Profile" macro or changes which make it easier to configure the "Custom User Search" macro correctly. On top of that we took care of some bugs.

The situation is similar for Linchpin Theme. We improved the caching of this child app and all its components. Another great update is accessibility related: It is now possible to navigate through Linchpin using the Tab key on your keyboard. It will take you through the entire header, then the navigation and finally the page content.

The Linchpin Enterprise News app comes with a brand new UI for news subscription. It's available in all places where selecting spaces for subscription is possible and features filters, a search and a summary of the selected space's content - like the publication date of the last news article in said space, for example.

Suite

Changes

• The Iconfont child app is being retired with this release. You can safely delete the child app if you wish to.

Improvements

• We made the Linchpin Intranet Suite compatible with JDK11.
• Now, the license cache will also be cleared when Linchpin Essentials is activated or deactivated.

Mobile app

New features

• Support for Microsoft Stream videos (iOS app): Videos hosted on Microsoft Stream can be viewed within the app now. Video links will also be rendered as a preview, just like with YouTube links.
• Reworked inline comments (iOS & Android app): On pages and news articles, there is now a button in the comment section that leads to the new view for inline comments, if such comments are available for the content being viewed. In the new inline comments view, you can view each comment and its replies individually and in an organized way. You can post your own reply directly from the new inline comments view.
  Documentation: https://seibert.biz/mobilecomments
  

• Reworked inline comments (Confluence backend): A new interface has been added for improved retrieval of inline comments via the mobile app. This now makes it possible to retrieve inline comments independently of regular page comments, read hierarchies within the comment structure, and filter completed inline comments.

• Display mobile connection status: There is now the possibility to view the status for mobile connections of a user in the administration area of Linchpin Mobile. We have summarized more information at https://seibert.biz/linchpinmobileconnectionsettingsdoc.

Improvements

• New look: The Linchpin mobile app features the new Linchpin design now.
• App Store tweaks: We improved the handling of our apps by the App Store.
• Improved app tracking transparency (iOS app): We improved the app tracking transparency.
• More visibility in the inline comment section: Resolved inline comments (including replies) will be hidden from the comment section now.

• Basic authentication check: It is now automatically checked if Basic Authentication is enabled for an instance on which Linchpin Mobile is used. If this is not the case, a notice is displayed in the Linchpin Mobile administration area. For more information, visit https://seibert.biz/linchpinmobilebasicauth.

• Fail-safe Gateway connection in Data Center environments: When using Linchpin Mobile in a data center environment with multiple nodes, if the connection to the Linchpin Mobile gateway is enabled, another node will automatically be connected should the node currently connected to the gateway fail. This reduces potential downtime for mobile use to a maximum of 60 seconds. For more information, visit https://seibert.biz/linchpinmobileconnectionsettingsdoc.

Bugfixes

• We fixed a rare bug which caused push notifications to be sent even though they were disabled in the system by the administration.

Login

Changes

• Linchpin Login is no longer an individual Linchpin child app. Instead, it is now part of the Linchpin Theme child app. The functionality remains the same - we are just tidying up a little.

Theme

Changes

• Since Linchpin Theme is only available as part of the Linchpin Intranet Suite and Linchpin Essentials for a while now, we removed APIs which were no longer needed (e. g. license API).

Improvements

• We optimized the caching of the Linchpin Theme child app and its components.
• We improved the navigation via keyboard. Now, you can tab through header elements, navigation elements and page content. In this order.
• We did some general clean-up. 🧹

Bugfixes

• We fixed a bug regarding a non-closing sidebar after a contact search was performed.
• We fixed a bug which wouldn't let you perform a search within the space directory. We also rephrased the error message.
• We fixed a bug which caused links within the editor to be displayed in wrong colors.
• We fixed a bug within the admin view of Linchpin Theme which made troubleshooting harder.
• We fixed menu cache invalidation issues.

User Profiles

Improvements

• We improved the performance of the "Profile" macro, especially when multiple macros are used on the same page.
• We improved the caching by removing unneccessary caches and increasing the life span of a cache to 24 hours.
• The "Custom User Search" macro can handle the fact that profile fields used as filters should not necessarily be displayed in the search as well now.
• We improved the handling of data sources within user profiles to prevent inconsistencies in profile field configurations.
• We made the naming of charts in admin view and within the people directory more consistent.

Bugfixes

• The "Org Chart" macro can be used on pages with other macros like the "Profile" macro or the "Customized User List" macro now.
• We resolved the issue regarding failing syncs when an MS Active Directory is being used. The MS Active Directory overwrites Linchpin User Profiles settings. That's why we disabled the option within Linchpin User Profiles when an affected software version is being used and instead added a help text explaining how to configure the sync in Confluence.
• We fixed a bug which made it possible to use hidden profile fields to configure structural charts which resulted in empty nodes being displayed.
• We fixed a bug which prevented profile pictures from being deleted properly.
• Within the structural chart, users belonging to a node were cached too aggressively. We fixed that.
• We fixed a bug which rendered the link to instant messengers within the people directory incorrectly.
• We fixed a bug which caused links of dependant fields be displayed even though they weren't.

News

New features

• We have completely renewed the news subscription UI to be much more usable. You can filter your news subscriptions by entering search terms, filter spaces by their default language (in combination with Language Manager 2.2.0) and get detailed information about the subscribable space (e.g., date of the newest blog post, number of blog posts, preview of the news feed). This new interface is available in all the useful places in Linchpin Enterprise News as well as in Onboarding and Pings.
  Documentation: https://seibert.biz/newssubscriptionsviamacros

Bugfixes

• We fixed a bug which prevented the creation of a blog post due to indexing problems.
• We fixed a bug which occured when displaying news categories in the compact mode of the news feed macros.

Events

Improvements

• We updated an internal library which resulted in better compatibility with other 3rd party Atlassian Marketplace apps as well as in improved overall performance.
  

Bugfixes

• We fixed a bug which deactivated/deleted JS Promises.

Language Manager

New features

• New APIs to be used in third party apps: We added access to spaces filtered by their default languages. These APIs can be used by third party apps like Linchpin Enterprise News and enable new features there.

News Digest

Improvements

• We made some infrastructure updates. 
• We removed the build info from the plugin's name (within the UPM).

Onboarding

Improvements

• We removed the "for internal use only" suffix from the app's name (within the UPM).

Personalized content

Improvements

• We removed the "for internal use only" suffix from the app's name (within the UPM).

Communicator

Changes

• We made changes to the cache of the Linchpin Communicator. It caused issues with navigation menus, these should be fixed with this change.

Complete changelog

Here is a complete overview of all the changes, features, improvements and bugfixes we are releasing now with our Linchpin Intranet Suite 5.1.

Security

• 5.1.1 We closed a potential scripting attack vector in the "Teaser" macro.
• 5.1.1 Our Linchpin User Profiles app is part of Atlassian's BugBounty program now.
• 5.1.1 Our Terms of Use app is part of Atlassian's BugBounty program now.
• 5.1.1 We fixed a vulnerability (found during our internal security audit) which potentially allowed to execute code using the admin's browser.
  More info: https://info.seibert-media.net/x/lAGFB
• 5.1.1 We fixed a vulnerability (found during our internal security audit) which potentially allowed unauthorized users to modify the recipients list of mail notifications on TofU revocation.
  More info: https://info.seibert-media.net/x/kQGFB
• 5.1.1 We fixed a a vulnerability (found during the internal security audit) which potentially allowed to inject executable code within the phone profile field and linked text profile fields.
  More info: https://info.seibert-media.net/x/FgCMB
• 5.1.3 We have found and fixed potential security vulnerabilities in different views of user profile data.
  Read more on that in our security advisories: https://seibert.biz/20211118cvelupxss & https://seibert.biz/20211118cvelupxss2
• 5.1.4 Linchpin Theme: We fixed a vulnerability which potentially allowed a Confluence administrator to upload a malicious XML file.
  More info: https://seibert.biz/20211210cveltpxxe
• 5.1.4 Linchpin User Profiles: We fixed a vulnerability which potentially allowed a Confluence administrator to upload a malicious XML file.
  More info: https://seibert.biz/20211210cvelupxxe

New features

• Support for Microsoft Stream videos (iOS app): Videos hosted on Microsoft Stream can be viewed within the app now. Video links will also be rendered as a preview, just like with YouTube links.
• Reworked inline comments (iOS & Android app): On pages and news articles, there is now a button in the comments section that leads to the new view for inline comments, if such comments are available for the content being viewed. In the new inline comments view, you can view each comment and its replies individually and in an organized way. You can post your own reply directly from the new inline comments view.
  Documentation: https://seibert.biz/mobilecomments

• Reworked inline comments (Confluence backend): A new interface has been added for improved retrieval of inline comments via the mobile app. This now makes it possible to retrieve inline comments independently of regular page comments, read hierarchies within the comment structure, and filter completed inline comments.

• Display mobile connection status: There is now the possibility to view the status for mobile connections of a user in the administration area of Linchpin Mobile. We have summarized more information at https://seibert.biz/linchpinmobileconnectionsettingsdoc.

• We have completely renewed the news subscription UI to be much more usable. You can filter your news subscriptions by entering search terms, filter spaces by their default language (in combination with Language Manager 2.2.0) and get detailed information about the subscribable space (e.g., date of the newest blog post, number of blog posts, preview of the news feed). This new interface is available in all the useful places in Linchpin Enterprise News as well as in Onboarding and Pings.
  Documentation: https://seibert.biz/newssubscriptionsviamacros

• New APIs to be used in third party apps: In the Language Manager, we added access to spaces filtered by their default languages. These APIs can be used by third party apps like Linchpin Enterprise News and enable new features there.

Changes

• The Iconfont child app is being retired with this release. You can safely delete the child app if you wish to.
• Linchpin Login is no longer an individual Linchpin child app. Instead, it is now part of the Linchpin Theme child app. The functionality remains the same - we are just tidying up a little.
• Linchpin Login is no longer an individual Linchpin child app. Instead, it is now part of the Linchpin Theme child app. The functionality remains the same - we are just tidying up a little.
• Since Linchpin Theme is only available as part of the Linchpin Intranet Suite and Linchpin Essentials for a while now, we removed APIs which were no longer needed (e. g. licence API).
• We made changes to the cache of the Linchpin Communicator. It caused issues with navigation menus, these should be fixed with this change.

Improvements

• We made the Linchpin Intranet Suite compatible with JDK11.
• Now, the license cache will also be cleared when Linchpin Essentials is activated or deactivated.
• New look: The Linchpin mobile app features the new Linchpin design now.
• App Store tweaks: We improved the handling of our apps by the App Store.
• Improved app tracking transparency (iOS app): We improved the app tracking transparency.
• More visibility in the inline comment section: Resolved inline comments (including replies) will be hidden from the comment section now.

• Basic authentication check: It is now automatically checked if Basic Authentication is enabled for an instance on which Linchpin Mobile is used. If this is not the case, a notice is displayed in the Linchpin Mobile administration area. For more information, visit https://seibert.biz/linchpinmobilebasicauth.

• Fail-safe Gateway connection in Data Center environments: When using Linchpin Mobile in a data center environment with multiple nodes, if the connection to the Linchpin Mobile gateway is enabled, another node will automatically be connected should the node currently connected to the gateway fail. This reduces potential downtime for mobile use to a maximum of 60 seconds. For more information, visit https://seibert.biz/linchpinmobileconnectionsettingsdoc.

• We optimized the caching of the Linchpin Theme child app and its components.
• We improved the navigation via keyboard. Now, you can tab through header elements, navigation elements and page content. In this order.
• We improved the performance of the "Profile" macro, especially when multiple macros where used on the same page.
• We improved the caching by removing unneccessary caches and increasing the life span of a cache to 24 hours.
• The "Custom User Search" macro can handle that profile fields used as filters should not necessarily be displayed in the search as well.
• We improved the handling of data sources within user profiles to prevent inconsistencies in profile field configurations.
• We made the naming of charts in admin view and within the people directory more consistent.
• We updated an internal library which resulted in better compatibility with other 3rd party Atlassian Marketplace apps as well as in improved overall performance.
• We made some infrastructure updates. 
• We removed the build info from the plugin's name (within the UPM).
• 5.1.1 The "Content Responsibility" macro takes hidden profile fields into consideration and won't allow users to select or see such profile fields now.
• 5.1.1 We improved the handling of deleted Microblog topics.
• 5.1.1 We improved Microblog's backend caches.

• 5.1.2 Linchpin Launchpad is compatible with Content Delivery Network now.

• 5.1.2 We improved the backend caching of Linchpin Launchpad.

• 5.1.2 Linchpin Mobile: Macros of the Confluence app "Aura" are now displayed in a mobile optimized representation.

• 5.1.2 Linchpin Mobile: The rendering in the "Mobile access" user profile tab has been improved so that HTML content deposited by the administration is displayed in an optimal way.

• 5.1.2 We improved the search behaviour in the people directory, and also in the macros Custom User Search and Customized User List.

• 5.1.4 We ensured Linchpin Theme's compatibility with Confluence 7.15.
• 5.1.4 We improved the help text displayed during an LDAP write test.

Bugfixes

• We fixed a bug regarding a non-closing sidebar after a contact search was performed.
• We fixed a bug which wouldn't let you perform a search within the space directory. We also rephrased the error message.
• We fixed a bug which caused links within the editor to be displayed in wrong colors.
• We fixed a bug within the admin view of Linchpin Theme which made troubleshooting harder.
• We fixed menu cache invalidation issues.
• The "Org Chart" macro can be used on pages with other macros like the "Profile" macro or the "Customized User List" macro now.
• We resolved the issue regarding failing syncs when an MS Active Directory is being used. The MS Active Directory overwrites Linchpin User Profiles settings. That's why we disabled the option within Linchpin User Profiles when an affected software version is being used and instead added a help text explaining how to configure the sync in Confluence.
• We fixed a bug which made it possible to use hidden profile fields to configure structural charts which resulted in empty nodes being displayed.
• We fixed a bug which prevented profile pictures from being deleted properly.
• Within the structural chart, users belonging to a node were cached too aggressively. We fixed that.
• We fixed a bug which rendered the link to instant messengers within the people directory incorrectly.
• We fixed a bug which caused links of dependant fields be displayed even though they weren't.
• We fixed a bug which prevented the creation of a blog post due to indexing problems.
• We fixed a bug which occured when displaying news categories in the compact mode of the news feed macros.
• We fixed a rare bug which caused push notifications to be sent even though they were disabled in the system by the administration.
• We fixed a bug which deactivated/deleted JS Promises.
• 5.1.1 We fixed the bug responsible for the disappearance of the pin icon within the Cover Stories macro. 
• 5.1.1 We fixed a bug which prevented spaces to be found (when subscribing via the "Subscribe to spaces" macro) when said spaces contained a hyphen in their name.
• 5.1.1 All space categories should now be findable within the "Subscribe to spaces" macro.
• 5.1.1 We made the navigation menus reappear for not logged-in and/or anonymous users when they're set to be visible for those users.
• 5.1.1 We fixed a bug which prevented space layout headers with a height of less than 140px to be displayed correctly.
• 5.1.1 When uploading a logo in the space layout configuration, the wording now correctly states that the logo will be used in the header area (and only there).
• 5.1.1 We fixed a bug regarding the column widths of the default theme.The default theme will be displayed correctly and as set now.
• 5.1.1 We fixed a license state caching error in Custom Landing Spaces.
• 5.1.1 The "Profile" macro won't display an empty white box anymore when there are no profile fields which could be displayed within it.
• 5.1.1 Very old pages shouldn't cause any problems anymore when the "Content Responsibility" macro is being used.
• 5.1.1 We fixed a bug which prevented the vCard to be displayed when hovering over elements within the "all updates" feed.
• 5.1.1 Empty date fields won't interrupt the LDAP sync anymore.
• 5.1.1 We fixed the Microblog's digest mail. It should now be delievered reliably.
• 5.1.1 We fixed a bug which automatically added event participants to the watch list of a linked event page.
• 5.1.1 Inactive Confluence users can be signed out of events now.
• 5.1.1 We fixed a bug which displayed Germanic umlauts in external event participants' names as Unicode.

• 5.1.2 Fix jumping position in news subscription overlay.

• 5.1.2 Fix restrictions after publishing news if manually group view permissions set and workflow is involved.

• 5.1.2 Adjusting the position of your Launchpad apps via drag & drop won't break the app order anymore.

• 5.1.2 We fixed a bug which prevented opening Launchpad apps via middle click (of a mouse).

• 5.1.2 We fixed the display of the profile macro user avatars in Linchpin Mobile.

• 5.1.2 We fixed the LDAP sync overwriting uninvolved fields.

• 5.1.2 We fixed link color in the editor.

• 5.1.2 We fixed an issue with favourite pages that remain in sidebar after deletion.

• 5.1.2 We fixed unwanted empty space between page title and breadcrumb navigation when scrolling pages.

• 5.1.3 We fixed an error that occurred when the same users have been configured both as editors and authors within a space.
• 5.1.3 We fixed errors regarding wrong restrictions after publishing news in a space with editors.

• 5.1.3 We fixed a bug that caused incorrect Launchpad app links to be displayed in search results (introduced in version 2.3.6).

• 5.1.3 We fixed the filtering in "Custom User List" macro configuration. No problems should occur anymore when multiple filters are in use.

• 5.1.3 We fixed the profile field dependency to confluence groups.

• 5.1.3 We improved the search within the People Directory, it allows double quotes usage now.

• 5.1.3 The filter in the "Custom User Search" macro filters "exactly" instead of "fuzzy" now.

• 5.1.3 The subline for tile view within the People Directory can be changed now.

• 5.1.4 We fixed an issue that sometimes wrongly removed manually set permissions for groups when workflow spaces were involved.
• 5.1.4 When using the "Subscribe to spaces" macro, the configured space categories are now respected when showing the subscribed spaces.
• 5.1.4 We fixed a bug which caused manually moved blog posts to break news macros sometimes.
• 5.1.4 We fixed a small UX glitch with the radio buttons of news teasers.
• Images in "Teaser" macros update automatically when the corresponding attachments get updated now.
• 5.1.4 We fixed a bug which caused a second search icon to be displayed in the header area of the theme.
• 5.1.4 We implemented an exception handling to prevent rollback of all user data changes in the LDAP sync if an avatar attachment could not be removed due to a bug in Confluence.
• 5.1.4 VCards are displayed correctly when hovering over an @-mention now.
• 5.1.4 We fixed fthe ilter alignment in the "Custom User Search" macro.
• 5.1.4 We fixed a bug which prevented anonymous users from seeing profile data within a VCard, even though they had the necessary permissions to view such data.
• 5.1.4 We fixed a bug which prevented profile fields to be moved to the left column in the configuration.
• 5.1.4 We fixed the display of the profile header field subline in the "My contacts" macro and the sidebar module. The bug occurred when dynamic linking was being used in the profile header field.
• 5.1.4 We fixed a bug which caused the subline of the profile header field to be always displayed in the people directory, even when the configuration should prevented it from being displayed.
• 5.1.4 We fixed a bug which caused the "Profile" macro to be missing information when used in a "Page Property" macro.

Linchpin Intranet Suite 5.1.1

Version 5.1.1 of the Linchpin Intranet Suite is a patch release. It contains mainly bugfixes and several security patches for potential vulnerabilities which we found during internal testings.

Security

• We closed a potential scripting attack vector in the "Teaser" macro.
• Our Linchpin User Profiles app is part of Atlassian's BugBounty program now.
• Our Terms of Use app is part of Atlassian's BugBounty program now.
• We fixed a vulnerability (found during our internal security audit) which potentially allowed to execute code using the admin's browser.
  More info: https://info.seibert-media.net/x/lAGFB
• We fixed a vulnerability (found during our internal security audit) which potentially allowed unauthorized users to modify the recipients list of mail notifications on TofU revocation.
  More info: https://info.seibert-media.net/x/kQGFB
• We fixed a a vulnerability (found during the internal security audit) which potentially allowed to inject executable code within the phone profile field and linked text profile fields.
  More info: https://info.seibert-media.net/x/FgCMB

Improvements

• The "Content Responsibility" macro takes hidden profile fields into consideration and won't allow users to select or see such profile fields now.
• We improved the handling of deleted Microblog topics.
• We improved Microblog's backend caches.

Bugfixes

• We fixed the bug responsible for the disappearance of the pin icon within the Cover Stories macro. 
• We fixed a bug which prevented spaces to be found (when subscribing via the "Subscribe to spaces" macro) when said spaces contained a hyphen in their name.
• All space categories should be findable within the "Subscribe to spaces" macro now.
• We made the navigation menus reappear for not logged-in and/or anonymous users when they're set to be visible for those users.
• We fixed a bug which prevented space layout headers with a height of less than 140px to be displayed correctly.
• When uploading a logo in the space layout configuration, the wording now correctly states that the logo will be used in the header area (and only there).
• We fixed a bug regarding the column widths of the default theme.The default theme will be displayed correctly and as set now.
• We fixed a license state caching error in Custom Landing Spaces.
• The "Profile" macro won't display an empty white box anymore when there are no profile fields which could be displayed within it.
• Very old pages shouldn't cause any problems anymore when the "Content Responsibility" macro is being used.
• We fixed a bug which prevented the vCard to be displayed when hovering over elements within the "all updates" feed.
• Empty date fields won't interrupt the LDAP sync anymore.
• We fixed the Microblog's digest mail. It should now be delivered reliably.
• We fixed a bug which automatically added event participants to the watch list of a linked event page.
• Inactive Confluence users can be signed out of events now.
• We fixed a bug which displayed Germanic umlauts in external event participants' names as Unicode.

Linchpin Intranet Suite 5.1.2

Version 5.1.2 of the Linchpin Intranet Suite is a patch release. It contains bugfixes and improvements.

Bugfixes

• Fix jumping position in news subscription overlay.

• Fix restrictions after publishing news, if manual group view permissions are set and a workflow is involved.

• Adjusting the position of your Launchpad apps via drag & drop won't break the app order anymore.

• We fixed a bug which prevented opening Launchpad apps via middle click (of a mouse).

• We fixed the display of the profile macro user avatars in Linchpin Mobile.

• We fixed the LDAP sync overwriting uninvolved fields.

• We fixed link color in the editor.

• We fixed an issue with favorite pages that remain in sidebar after deletion.

• We fixed unwanted empty space between page title and breadcrumb navigation when scrolling pages.

Improvements

• Linchpin Launchpad is compatible with Content Delivery Network now.

• We improved the backend caching of Linchpin Launchpad.

• Linchpin Mobile: Macros of the Confluence app "Aura" are now displayed in a mobile optimized representation.

• Linchpin Mobile: The rendering in the "Mobile access" user profile tab has been improved so that HTML content deposited by the administration is displayed in an optimal way.

• We improved the search behavior in the people directory, and also in the macros Custom User Search and Customized User List.

Linchpin Intranet Suite 5.1.3

Release 5.1.3 of the Linchpin Intranet Suite contains security patches and bugfixes.

Security

• We have found and fixed potential security vulnerabilities in different views of user profile data.
  Read more on that in our security advisories: https://seibert.biz/20211118cvelupxss & https://seibert.biz/20211118cvelupxss2

Bugfixes

• We fixed an error that occurred when the same users have been configured both as editors and authors within a space.
• We fixed errors regarding wrong restrictions after publishing news in a space with editors.

• We fixed a bug that caused incorrect Launchpad app links to be displayed in search results (introduced in version 2.3.6).

• We fixed the filtering in "Custom User List" macro configuration. No problems should occur anymore when multiple filters are in use.

• We fixed the profile field dependency to confluence groups.

• We improved the search within the People Directory, it allows double quotes usage now.

• The filter in the "Custom User Search" macro filters "exactly" instead of "fuzzy" now.

• The subline for tile view within the People Directory can be changed now.

Linchpin Intranet Suite 5.1.4

Release 5.1.4 of the Linchpin Intranet Suite contains a security patch and bugfixes. Furthermore, Linchpin Theme is compatible with Confluence 7.15 now.

Security

• Linchpin Theme: We fixed a vulnerability which potentially allowed a Confluence administrator to upload a malicious XML file.
  More info: https://seibert.biz/20211210cveltpxxe
• Linchpin User Profiles: We fixed a vulnerability which potentially allowed a Confluence administrator to upload a malicious XML file.
  More info: https://seibert.biz/20211210cvelupxxe

Improvements

• We ensured Linchpin Theme's compatibility with Confluence 7.15.
• We improved the help text displayed during an LDAP write test.

Bugfixes

• We fixed an issue that sometimes wrongly removed manually set permissions for groups when workflow spaces were involved.
• When using the "Subscribe to spaces" macro, the configured space categories are now respected when showing the subscribed spaces.
• We fixed a bug which caused manually moved blog posts to break news macros sometimes.
• We fixed a small UX glitch with the radio buttons of news teasers.
• Images in "Teaser" macros update automatically when the corresponding attachments get updated now.
• We fixed a bug which caused a second search icon to be displayed in the header area of the theme.
• We implemented an exception handling to prevent rollback of all user data changes in the LDAP sync if an avatar attachment could not be removed due to a bug in Confluence.
• VCards are displayed correctly when hovering over an @-mention now.
• We fixed fthe ilter alignment in the "Custom User Search" macro.
• We fixed a bug which prevented anonymous users from seeing profile data within a VCard, even though they had the necessary permissions to view such data.
• We fixed a bug which prevented profile fields to be moved to the left column in the configuration.
• We fixed the display of the profile header field subline in the "My contacts" macro and the sidebar module. The bug occurred when dynamic linking was being used in the profile header field.
• We fixed a bug which caused the subline of the profile header field to be always displayed in the people directory, even when the configuration should prevented it from being displayed.
• We fixed a bug which caused the "Profile" macro to be missing information when used in a "Page Property" macro.