/
v270-jump.html
310 lines (253 loc) · 13.9 KB
/
v270-jump.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<title>Passbolt Help | Jump</title>
<!--
____ __ ____
/ __ \____ _____ ____/ /_ ____ / / /_
/ /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/
/ ____/ /_/ (__ |__ ) /_/ / /_/ / / /_
/_/ \__,_/____/____/_.___/\____/_/\__/
Open source password manager for teams
© 2019 Passbolt SA
-->
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="description" content="This release introduces some security fixes, new dependencies and database changes. Make sure you follow the minor update documentation to roll out this new ...">
<meta property="og:image" content="https://help.passbolt.com/assets/img/background/og_preview.jpg" />
<meta property="og:title" content="Jump" />
<meta property="og:description" content="This release introduces some security fixes, new dependencies and database changes. Make sure you follow the minor update documentation to roll out this new ..." />
<link rel="stylesheet" href="https://help.passbolt.com/assets/css/help.min.css">
<link rel="stylesheet" href="https://help.passbolt.com/assets/css/highlight.css">
<link rel="canonical" href="https://help.passbolt.com/releases/ce/v270-jump">
<link rel="shortcut icon" type="image/x-icon" href="https://help.passbolt.com/assets/favicon.ico" />
<link rel="alternate" type="application/rss+xml" title="Passbolt | Help" href="https://help.passbolt.com/feed.xml">
</head>
<body>
<div id="container" class="help page background">
<header>
<div class="header first ">
<nav class="greedy">
<div class="top navigation primary">
<ul class="links clearfix">
<li class="home with-text"><a href="http://www.passbolt.com/"><span>home</span></a></li>
<li class="left"><a href="https://www.passbolt.com/services"><span>pricing</span></a></li>
<li class="left"><a href="https://demo.passbolt.com" target="_blank" rel="noopener"><span>demo</span></a></li>
<li class="left"><a href="https://www.passbolt.com/blog"><span>blog</span></a></li>
<li class="left selected"><a href="//help.passbolt.com/"><span>help</span></a></li>
</ul>
<button class="hidden" count="0">more</button>
<ul class="hidden-links hidden"></ul>
</div>
</nav>
</div>
</header>
<div class="header second">
<div class="col1">
<div class="logo no-img">
<h1><span>Passbolt</span></h1>
</div>
</div>
<div class="col2 search-wrapper">
<h2 class="visuallyhidden">Help Search</h2>
<div>
<form class="search ready" action="/search.html" method="get">
<div class="input required">
<label for="search-box">Search</label>
<input id="search-box" name="query" maxlength="64" placeholder="Help search" class="fuzzy-search" type="search">
</div>
<button value="search">
<i class="fa fa-fw fa-search"></i>
<span class="text visuallyhidden">search</span>
</button>
</form>
</div>
</div>
<div class="col3">
<div class="edit-on-github">
<a href="https://github.com/passbolt/passbolt_help/edit/master/_releases/ce/v2.7.0.md" class="button">
<i class="fa fa-github-alt fa-fw"></i> Edit on github</a>
</div>
</div>
</div>
<div class="panel main" aria-label="Content">
<div class="panel left">
<div class="navigation wizard scrollspy" role="navigation">
<ul class="nav">
<li><h2>Last releases (ce)</h2></li>
<li class="">
<a href="https://help.passbolt.com/releases/ce/v282-blue-monday" >v2.8.2</a>
</li>
<li class="">
<a href="https://help.passbolt.com/releases/ce/v271-welcome-to-the-jungle" >v2.7.1</a>
</li>
<li class="selected">
<a href="https://help.passbolt.com/releases/ce/v270-jump" >v2.7.0</a>
</li>
<li class="">
<a href="https://help.passbolt.com/releases/ce/v250-thunderstruck" >v2.5.0</a>
</li>
<li class="">
<a href="https://help.passbolt.com/releases/ce/v240-final-countdown" >v2.4.0</a>
</li>
<li>
<a href="https://help.passbolt.com/releases" >all releases</a>
</li>
</ul>
</div>
<div style="margin:1em;">
<a href="https://help.passbolt.com/releases/ce.rss" class="primary button">
<i class="fa fa-rss fa-fw"></i>RSS feed</a>
</div>
</div>
<div class="panel middle">
<div class="grid grid-responsive-12">
<article>
<div class="row">
<div class="col7">
<div class="row" id="introduction">
<div class="col12">
<div class="breadcrumbs">
<ul>
<li>
<div class="main-cell">
<a href="https://www.passbolt.com"><span>home</span></a>
</div>
</li>
<li>
<div class="main-cell">
<a href="/"><span>help</span></a>
</div>
</li>
<li>
<div class="main-cell">
<a href="https://help.passbolt.com/releases"><span>releases</span></a>
</div>
</li>
<li>
<div class="main-cell">
<a href="https://help.passbolt.com/releases/pro"><span>pro</span></a>
</div>
</li>
<li>
<div class="main-cell">
<a href="https://help.passbolt.com/releases/ce/v270-jump"><span>jump</span></a>
</div>
</li>
</ul>
</div>
</div>
</div>
<h1>v2.7.0 ~ Jump (ce)</h1>
<p>Release date:
February
11th,
2019.
</p>
<div class="message warning">
<p>
This release introduces some security fixes, new dependencies and database changes. Make sure you follow
the minor <a href="https://help.passbolt.com/hosting/update">update documentation</a> to roll out this new version as soon as possible.
</p>
<a href="https://help.passbolt.com/hosting/update" class="button">Update documentation</a>
</div>
<p><br />
The main focus of this release was to improve the performance and reactivity of the application, as well as
address some minor security issues.</p>
<p>The only feature that was added is a better support for url sharing,
e.g. if you look at the sidebar when clicking on a resource you will be presented with a link. You can use it
to send the url to a given resource to a colleague: if they have access to this resource they will be able to
navigate directly to it. Similarly links in emails pointing to a resource will take you directly to the corresponding record.</p>
<figure>
<img src="https://help.passbolt.com/assets/img/help/2019/02/LU_application_urls.png" alt="Application urls are now more usable" style="max-width:;" />
<span class="legend">fig. Application urls are now more usable</span>
</figure>
<p>The team also worked hard to speed up the performances of the application, most
notably by starting to load OpenPGP secrets asynchronously (instead of within the resource index calls).
This strategy allows to reduce the loading time of the homepage from 12 to 2 seconds, in our tests with a database containing 2000 passwords shared
over 400 users. This ground work was also necessary in order to be able to trace accesses to secrets and provide a more granular audit log coming up in the next release.</p>
<p>This release also includes 3 fixes found during an independent security audit
conducted by french security researcher Jose-Alexandre Mayan. You can learn more about these
fixes on the dedicated <a href="https://www.passbolt.com/incidents/20190211_multiple_vulnerabilities">security incident page</a>.</p>
<p>The team also wanted to thank everyone who reported issues and helped us investigate them further, especially
Ricardo Marinho, Marc-Daniell Hess, Christoph Grabmer and Eric Wright.</p>
<h2 id="passbolt-web-extension">Passbolt Web Extension</h2>
<h3 id="improvement">Improvement</h3>
<ul>
<li>PASSBOLT-3347: When the extension requires the users to enter their master password, the popup should be displayed with no delay</li>
<li>PASSBOLT-3313: As GM adding a user to a group I should see the loading popup when the extension is processing/requesting the API</li>
<li>PASSBOLT-3312: As GM adding a user to a group I should see a relevant feedback in case of network/proxy errors</li>
<li>PASSBOLT-3316: As LU Sharing a password I should see a loading feedback when the extension is requesting the API</li>
<li>PASSBOLT-3318: As LU I should retrieve a secret when I’m copying it</li>
<li>PASSBOLT-3319: As LU I should retrieve a secret when I’m editing it</li>
<li>PASSBOLT-3403: As LU I should retrieve secrets when I’m exporting the associated passwords</li>
</ul>
<h2 id="passbolt-api">Passbolt API</h2>
<h3 id="added">Added</h3>
<ul>
<li>PASSBOLT-2995: As LU I should be able to copy the permalink of a password</li>
</ul>
<h3 id="improved">Improved</h3>
<ul>
<li>PASSBOLT-3403: As LU I should export only selected passwords</li>
<li>PASSBOLT-3397: Remove the list of secrets from the API request while loading the list of passwords</li>
<li>PASSBOLT-3319: As LU I should retrieve a secret when I’m editing it</li>
<li>PASSBOLT-3318: As LU I should retrieve a secret when I’m copying it</li>
<li>PASSBOLT-3317: Display significant information as soon as possible while opening the application</li>
<li>PASSBOLT-3312: As GM adding a user to a group I should see a relevant feedback in case of network/proxy errors</li>
<li>PASSBOLT-3314: Improve the performance of the application by adding missing indexes</li>
<li>PASSBOLT-2974: As LU I should be able to follow links targeting passwords from my emails</li>
</ul>
<h3 id="fixed">Fixed</h3>
<ul>
<li>PASSBOLT-3363: Fix the web installer should not use the exec php primitive to create/import the gpg server key</li>
<li>PASSBOLT-3370: Fix auth verify error should not leak data</li>
<li>PASSBOLT-3368: Fix html injection in email</li>
</ul>
</div>
<div class="col5 last">
<div class="tldr" style="margin-top:3em;">
<p>"You got to roll with the punches and get to what's real"</p>
<a href="https://www.youtube.com/watch?v=SwYN7mTi6HM" target="_blank" rel="noopener nofollow" class="button primary">
<i class="fa fa-music"></i>
<span class="visuallyhidden">Listen to the release song!</span>
</a>
</div>
</div>
</div>
</article>
</div>
</div>
</div>
<footer>
<div class="footer">
<ul class="footer-links">
<li><a href="https://www.passbolt.com/licence">Terms</a></li>
<li><a href="https://www.passbolt.com/privacy">Privacy</a></li>
<li><a href="https://www.passbolt.com/credits">Credits</a></li>
<li><a href="https://careers.passbolt.com">Careers</a></li>
</ul>
</div>
</footer>
</div>
<!-- Piwik -->
<script type="text/javascript">
var _paq = _paq || [];
_paq.push(['trackPageView']);
_paq.push(['enableLinkTracking']);
(function() {
var u="//passbolt.piwikpro.com/";
_paq.push(['setTrackerUrl', u+'piwik.php']);
_paq.push(['setSiteId', 1]);
var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'piwik.js'; s.parentNode.insertBefore(g,s);
})();
</script>
<noscript><p><img src="//passbolt.piwikpro.com//piwik.php?idsite=1" style="border:0;" alt="" /></p></noscript>
<!-- End Piwik Code -->
<script src="https://code.jquery.com/jquery-3.3.1.min.js" crossorigin="anonymous"
integrity="sha256-FgpCb/KJQlLNfOu91ta32o/NMZxltwRo8QtmkMRdAu8="></script>
<script src="https://help.passbolt.com/assets/js/greedynav.js"></script>
</body>
</html>