View Source

April 21st 2015

eZ announces the availability of 5.4.2, a maintenance release available for all users of eZ Publish Platform 5.4 containing a notable few updates and fixes.

A newer release is available, rendering update instructions here obsolete and non working. Please see 5.4.x Update Instructions for always uptodate instructions for 5.4 releases.

Updating from a previous version of eZ Publish Platform 5.4

Update to 5.4.1 first before you continue with instructions below.

These instructions take advantage of Composer for maintenance updates, so make sure you familiarize yourself with the Using Composer page.
For Upgrading from versions prior to 5.4 look at our Upgrading from 5.2 to 5.4, or Upgrading from 5.3 to 5.4 page.

1. Remove unneeded dependency causing conflicts

Perform the following command to make sure you you are not affected by conflicts caused by this package:

php -d memory_limit=-1 composer.phar remove behat/mink-selenium-driver --no-update --dev

2. Updating Composer Packages selectively

With this command you'll only update packages from eZ (and Symfony) that have received updates:

php -d memory_limit=-1 composer.phar update --no-dev --prefer-dist --with-dependencies ezsystems/ezpublish-kernel ezsystems/demobundle ezsystems/ezdemo-ls-extension ezsystems/ezpublish-legacy symfony/symfony

If you use either ezsystems/ezfind-ls (eZ Find) or ezsystems/ezcontentstaging-ls (eZ Content Staging), they must be added to the command line above.

Legacy extensions autoload must be regenerated. You can do it by running this command:

php ezpublish/console ezpublish:legacy:script bin/php/ezpgenerateautoloads.php --extension

Security update

This release fixes a vulnerability in the eZ Publish password recovery function. You need to have the PHP OpenSSL extension (ext-openssl) installed to take full advantage of the improved security, but even without it security is improved.

Security Advisory for Community: http://share.ez.no/community-project/security-advisories/ezsa-2015-001-potential-vulnerability-in-ez-publish-password-recovery

eZ Find

An eZ Find users needs to update their solr schema.xml, this is however not needed if you install ezfind after performing this update.

For each solr core (located in ezfind/java/solr), you need to edit <my-core-name>/conf/schema.xml

Around line 566, right after:

<field name="meta_priority_si" type="sint" indexed="true" stored="true" multiValued="true"/>

Add the following lines:

<!-- denormalised fields for hidden and visible path elements -->
<field name="meta_visible_path_si" type="sint" indexed="true" stored="true" multiValued="true"/>     <!-- Visible Location path IDs -->
<field name="meta_visible_path_string_ms" type="mstring" indexed="true" stored="true" multiValued="true"/> <!-- Visible Location path string -->
<field name="meta_hidden_path_si" type="sint" indexed="true" stored="true" multiValued="true"/>     <!-- Hidden Location path IDs -->
<field name="meta_hidden_path_string_ms" type="mstring" indexed="true" stored="true" multiValued="true"/> <!-- Hidden Location path string -->

Restart and re-index solr.

Backward compatibility

The XmlText fix for EZP-23513 (see https://github.com/ezsystems/ezpublish-kernel/pull/1087) deprecates/removes the CustomTags pre-converter in favor of a new Expanding converter. While they're not part of the public API, if you rely on this file in any way, you might want to check and update your code.

Package updates

Here are the ezsystems packages that have received an update as part of this releases:

package	version	prior version
ezsystems/ezpublish-kernel	5.4.2	5.4.0
ezsystems/ezpublish-legacy	5.4.2	5.4.0
ezsystems/demobundle	5.4.2	5.4.0
ezsystems/ezfind-ls	5.4.2	5.4.0
ezsystems/ezcontentstaging	5.3.5	5.3.3
ezsystems/ezdemo-ls-extension	5.4.2	5.4.0
ezsystems/ezflow-ls-extension	5.3.5	5.3.3.1
ezsystems/ezwt	5.3.5	5.3.1
ezsystems/ezautosave	5.3.5	5.3.1

See 5.4.1 Release Notes for details about migration from Symfony 2.5 to 2.6.