Features

• Self-generated SSL certificates for admin UI or ServeContent now have 2048 bit keys.

• Substantial reduction in memory requirements.

• The AUID is displayed in the AU detail page, and available in metadata index status tables.

• Minor migrator changes to improve reporting, increase compatibility with 2.0.

• All plugins and keystores used for unit tests are now generated by scripts.

Bug Fixes

• Plugin jar validation checked only jar members listed in the manifest. It may have been possible to exploit this to cause the system to load a class added to a plugin jar after it was signed.

• Fixed a unicode normalization vulnerability that might have allowed specially crafted bibliographic info in the title DB to cause the UI to misbehave.

• Fixed a bug preventing hash estimate padding from being fully configurable.