Downloads

Download tar.gz 54.5 KB
MD5: e4aeae960082cfd8759f3ce3da8ac44c
SHA-1: 5b4f16eb5a60715e57dcd3c6169c2b95f09edb44
SHA-256: 5152af0a0823d7752582de59acdbc5ec5b092187d7655790d07d036631d29fa7
Download zip 66.35 KB
MD5: 5048a8592b55e787f3a9ff4f472b1a48
SHA-1: 28555be13017ec53d8e9a6a2272c2a2224874b6a
SHA-256: 9f08515ce176063ed65f0ca5117b7ca21423ef6bf7c10a0211a9bacb948e4f6f

Release notes

This release addresses an access bypass security issue, DRUPAL-SA-2007-020. Sites that try to restrict access to projects based on the 'access projects' or 'access own projects' permissions should upgrade immediately.

Other changes since 4.7.x-1.2:

  • #115625: browse-by-date has no pager when filtering by version. Thanks to merlinofchaos for helping to find the bug in the count_query SQL.
  • #149963 by dww and aclight: Projects overview page has bad links to taxonomy terms that don't belong to the "Projects" vocabulary, and the links don't include other goodness from taxonomy_link(), for example, mouse-over link titles for term descriptions, etc.
  • #151490 by aclight: View CVS Messages should not be available if project has no repository set.
  • #58630 by aclight: Fixing project breadcrumbs on the "View CVS messages" and "Developers" pages, along with a better version of project_project_set_breadcrumb() to make it easier to get breadcrumbs right in other places in the project* codebase.
  • #155996 by hass and drewish: Removed MyISAM settings from MySQL statements. Backported by dww for DRUPAL-4-7.
  • #159321: "Automatically generated path..." on project edit form needs a div. Backporting isn't technically necessary, since the bug doesn't appear in 4.7.x, but the extra div can't hurt.
  • #155727 by dww: Fixing improper use of dynamic content inside t().
  • #163464 by hunmonk -- make project select query SQL compliant.
  • #159334 by dww: Fixed translation bugs and improved help text about the project vocabulary on the settings page. The text is now displayed at admin/content/taxonomy if you view the "Project type" vocabulary.
  • #57667 by dww: Removed the code trying to display help text about using the "Project type" vocabulary when adding or editing project nodes. The code didn't work, so it wasn't displaying anyway, and the UI has been so majorly improved (#64221) that the help isn't needed.
  • Adding link to TODO list: http://groups.drupal.org/node/5489
  • #114281 and #168760 (SA-2007-020) by dww: Fixed numerous access bugs.
Created by: dww
Created on: 19 Aug 2007 at 23:33 UTC
Last updated: 31 Jul 2017 at 17:28 UTC
Security update
Bug fixes
Unsupported

Other releases