Release Notes Xinet 19.0.2 Product: Xinet Version:19.0.2 Contents: • Resolved Issues • Known Issues • Installation Instructions Resolved Issues This fix release provides various fixes on the Xinet 19.0.1 release. The full list of specific additions and bug fixes that are included in this release are detailed below. Key Component/s Release Note Text Linked Issues XIN-2664 WebNative Plugin Introduced the ability to change the default value for the setting that determines when InDesign text is greeked (replaced by a grey box). This setting is by default 7.0, meaning that anything below text size 7 on a InDesign document gets greeked. This value can be changed to any value above 0 and below 1296 (InDesign's maximum text point size). However, note that smaller text sizes may not be readable, even when zooming, because the previews added by the InDesign plug-in are raster JPG images (JPGs).To change this default value (assuming you want to change the value to 5, for example): - On macOS run the following command-line:defaults write com.xinet.indesign.webnative GreekTextBelowPointSize -int 5- On Windows, go to the Registry Editor and update the value is stored in: HKEY_LOCAL_MACHINE\SOFTWARE\Xinet\InDesign\WebNative\GreekTextBelowPointSize XIN-7079 Interpreter Fixed an issue where some PDF files were previewed in greyscale rather than color. XIN-7094 Interpreter Improved robustness when previewing PDF files. RGB images are no longer converted to CMYK or greyscale for preview (which was causing unpredictable results or failures), and also fixed a crash caused by certain ICC profiles with non-obvious base colorspaces. XIN-7101 SMB2 Enabled SMB user connections to the Venture database for those installations with only a FullPress license. XIN-7141 Portal PHP Enhanced robustness of Solr processing so that query results and parent-child relationships in the navigator stay accurate. Previously, there were unexpected results after the Solr database was updated numerous times with the addition of folders. XIN-7275, XIN-7145 XIN-7154 Portal PHP Enhanced security by neutralizing script-related HTML tags that were identified by a Veracode security audit as vulnerable to cross-site scripting attacks. XIN-7155 Portal PHP Enhanced security by ensuring that the base Marquee URL is secured against UI redressing attacks (clickjacking). XIN-3027, XIN-6586, XIN-7147 XIN-7169 Portal PHP Enhanced security by ensuring cookies set by the application no longer include the current user's username and password, and are no longer encoded by Base64, which is relatively easy to decipher. XIN-7170 Portal PHP Enhanced security of Portal by escaping all File Comments sent with server data in order to prevent a browser from interpreting them as HTML and/or JavaScript. XIN-7171 Portal PHP Enhanced security by ensuring the internal IP address of the server is not divulged, even as part of a Base64 encoded URL parameter. This change removes the remote possibility of attacks if attackers somehow manage to penetrate a compromised internal system. XIN-5764 XIN-7177 Pilot UI, WebNative Plugin Fixed an issue that happened occasionally when dragging and dropping from Xinet 19 to InDesign CC 2015. XIN-7099, XIN-7464 XIN-7180 Solr Search The Solr indexing was enhanced to proceed even if it runs into invalid date values (for example, a year set with no month, day or time). XIN-7205 WebNative Added a fix to ensure that collections (baskets) are still available to users whose licenses do not include Portal. XIN-7250 XinetAPI A 20-character limit is enforced for archive media names. (This avoids truncation and possible collisions with other media names.) XIN-7309 WebNative Plugin For InDesign document previews on macOS operating systems, it is now possible to turn off the display of objects that have the "Nonprinting" Output Attribute set; run the following command on a macOS command line:defaults write com.xinet.indesign.webnative SnapshotUtilsFlags -int 4096However, note that turning off the Nonprinting setting causes page boundary boxes to be drawn. Therefore, the recommended Xinet default is to show Nonprinting objects to avoid these boundary boxes. XIN-7316 Xinet Contextual Menu Plugin Improved robustness when installing the Xinet Client mpkg file on macOS Sierra 10.12.4. XIN-7349 portalDI Fixed an issue where the Solr indexing was incomplete, preventing files from displaying if invalid characters were encountered in JSON output for KEYWORD_USAGE_START_DATE. XIN-7352 GUI Increased the Access Control List (ACL) name limit from 31 to 63 bytes, and added crash-prevention code if names happen to be longer than that. XIN-7354 Xinet Core Fixed a critical Ghostscript vulnerability issue, identified in security vulnerability datasource CVE (CVE-2017-8291). XIN-7405 Solr Search For the Solrutil natural sort name function, improved robustness for the situation where the Windows Uploader includes illegal UTF8 characters in path names. XIN-7460 Portal PHP Enhanced security by addressing a cross-site scripting vulnerability that was present with fields related to saved searches. XIN-7471 Venture Fixed an issue where metadata from Photoshop saves was not being updated in Venture. Known Issues See previous versions for lists of known issues. Installation Instructions Important! Xinet 19 ships with a new version of Solr (Solr 6.2.1) to improve stability and performance. This new version requires your Solr search index to be reindexed, and to ensure this happens the Xinet19 installer automatically deletes the old Solr index, which would no longer be functional due to incompatibilities in data formats between Solr versions. You will need to reindex your Solr index database. This may take some time to complete, depending on the size of your Xinet environment. Please be aware that Java 1.8 is required to run Solr 6.2.1. If you are not already running Java 1.8, we recommend upgrading to this version prior to the Xinet installation. Set Up File Sharing SMB file sharing will automatically be installed with the Xinet installers for the Linux platform as long as the appropriate samba packages are installed and up to date. Prior to installing Xinet, run: # yum install samba To enable SMB access for new Xinet users: 1. Create a system user for any new users. 2. Create a Xinet user in the Admin GUI for new users. This will automatically create the SMB user and password if you already created a system user. 3. Enable the "Can access SMB Volumes" for users. To enable SMB access for existing Xinet users: 1. Create a system user for any new users. Many users may already have this access, because it was necessary for AFP access. 2. Enable the "Can access SMB Volumes" for users. This will require a password change. Where to find Xinet Installers Xinet installers are available online. Visit www.northplains.com and click Xinet Portal at the top of the page to locate the appropriate installer for your platform. For full details on how to install the Xinet server and client, see in our Xinet Administration Guide. For full details on installing the Video Module for Xinet, see Installing the Xinet Video Module in our Xinet Administration Guide.