Release date: March 25, 2020
About this release
Version 4.19 of DRACOON Core was rolled out on the DRACOON cloud on March 25, 2020 and replaces the previous version 4.18.1.
Changes and optimizations
- Refactored password policies: The existing password policies have been optimized internally.
The only change that affects users: The characters
'are no longer allowed in DRACOON passwords. This change only affects new passwords—existing passwords that contain any of these characters continue to work.
- This version of DRACOON Core also offers numerous minor improvements and optimizations.
- Version 4.19 of DRACOON Core contains some bug fixes that resolve problems in DRACOON Core.
For a detailed list of bug fixes, please refer to the technical release notes (see below).
- Version 4.19 of DRACOON Core contains an update for Spring Boot, which in turn contains the new version 9.0.31 of Apache Tomcat. This fixes the Tomcat vulnerability CVE-2020-1938, which became known as Ghostcat. However, exploiting this vulnerability on the DRACOON cloud would never have been possible due to the way the DRACOON cloud is configured.
Technical release notes
All changes in DRACOON Core 4.19 can be found in the technical release notes: