Bugfixes

• Upgrades could fail when using LDAP.

11.10.340 Improvements

This release also includes all features and bug fixes from 11.10.340, including:

New Features

• Enterprise Activity Dashboard.
• Git bitmap performance improvements.
• Better organization and team management.
• Mobile line notes and mobile pull request merging.
• Two-factor authentication status added to user reports.
• Webhooks configuration and customization improvements.
• Updated Services UI.
• Releases API.
• Enhanced OAuth security for SSH keys.
• Recent activity audit for authentication credentials.
• Auditing for active browser sessions.
• Forward secrecy and authenticated encryption ciphers.
• Advanced settings for blocking force pushes.
• Soft-wrapping and rendered views for prose diffs.
• Embedded YAML metadata rendering in prose documents.
• Expanded task lists support and nesting in prose documents.
• Expanding context in diffs.
• Redesigned conversations.
• Wikis UI improvements.
• Metadata, sitemaps, build feedback, and pagebuild events in Pages.
• 3D file rendering and diffing.
• Added support for go-import meta tag.
• Ubuntu's UFW firewall enabled by default.

LDAP improvements

• LDAP users can change their username and still be mapped to the same distinguished name.
• Support for group definitions using posixGroup and groupOfUniqueNames in addition to the current groupOfNames.
• Support for nested group definitions.
• More flexible mapping of user fields.

Bugfixes

• Improperly displayed information about Git alternate networks on the repository admin page.
• Blacklist "network" for user/organization names.
• Improperly displayed Mirrors filter on repositories listing.
• Inconsistent interface elements displayed when interacting with internal links on custom tabs.
• Improperly excluded some system log files from log forwarding.
• Error during sign in when LDAP passwords contain accented characters.
• Error when creating an LDAP user through the site admin if the login was normalized.
• Failed to load LDAP users page when the directory server's size limit was exceeded.

Security fixes

• MED: Timing attack vulnerability in Management Console.