Downloads

Download tar.gz 35.81 KB
MD5: 8ee4cc34562de787fecb5919ea5ca3eb
SHA-1: 9bcea13ecb51b02f0ee143448bdfc1b539d7ca21
SHA-256: 53487a5d9f3ca9526558915609da1095b3b48c178bd507e3acfd8af688018989
Download zip 40 KB
MD5: 4e918cb512d8a949bfc4b680432bf6c4
SHA-1: cf44da800b41ff024685920b3ec57327d8341554
SHA-256: 1fc17d01662bc21c93212006fc3df5bbc038e5136c2269c7fe0385f9e9528ba9

Release notes

This release addresses an access bypass security issue, DRUPAL-SA-2007-020. Sites that try to restrict access to issues based on the 'access project issues' or 'access own project issues' permissions should upgrade immediately.

Other changes since 4.7.x-1.3:

  • #130390 by Heine: file_check_directory() takes a reference.
  • #132025 by doc: fix encoding of issue followup data (it's a binary column in the schema, not a string) to remove SQL errors on pgsql.
  • #110822 by doq (really from #138020): Fix wrong multibite truncation.
  • #137435 (debugged by Sean B Fuller and yched, patch by dww): unnecessary call to node_load() while we're in the middle of hook_insert() results in empty CCK cache data for new issues.
  • #152789 by aclight: Fix breadcrumbs on project/issues page
  • #97207 by aclight: Fixed breadcrumb on followup form page.
  • #155996 by dww: Removed MyISAM settings from MySQL statements.
  • #103798 by plumbley and dww: Fixed PHP notices for E_ALL compliance.
  • #157517 by hass and dww: Fixed a few translation problems.
  • Fixing yet more translation problems.
  • #159471 by hass: Table header name incomplete (s/Pri/Priority/).
  • #163102 by dww: Removed stray whitespace (backport via perl 1-liner).
  • Fixed weird PHP5 problem where we needed {} around a variable name so we could address it like an array.
  • Moving TODO list to wiki page: http://groups.drupal.org/node/5489
  • #165975 by hunmonk. fatal error when adding new project issue status in postgres. manually set the sequence to the correct starting value.
  • #159544: "Submit" is too general for translations, so we're now using "Create" for various menu items and links (backport by bdragon).
  • #106654 by drewish: Added missing index on {project_issues}.sid (backport by dww).
  • #164958 by drewish and dww: Added missing pgsql indexes.
  • #104190 by hunmonk -- Submit issues cannot find projects. check for missing projects when modules is installed, and insert them if missing. since 4.7 doesn't have a hook_enable(), this only fixes the issue on a clean install.
  • #107706 by hunmonk: make query use index. added index on nid, assigned to project_issues table.
  • #159286 by dww: Fixed problems with how file extension whitelists work and made the default extensions visible in the settings UI.
  • #59039 by hunmonk: attachements missing after pressing preview. use file_check_upload() in form builder to check for uploaded file. this works for both cases, and since the function caches it's results, it won't cause problems when it's called again during validate.
  • #114281 and #168760 (SA-2007-020) by dww: Fixed numerous access bugs.
Created by: dww
Created on: 19 Aug 2007 at 23:52 UTC
Last updated: 1 Aug 2018 at 19:35 UTC
Security update
Bug fixes
Insecure
Unsupported

Other releases