Downloads
Download tar.gz
35.81 KB
MD5: 8ee4cc34562de787fecb5919ea5ca3eb
SHA-1: 9bcea13ecb51b02f0ee143448bdfc1b539d7ca21
SHA-256: 53487a5d9f3ca9526558915609da1095b3b48c178bd507e3acfd8af688018989
Download zip
40 KB
MD5: 4e918cb512d8a949bfc4b680432bf6c4
SHA-1: cf44da800b41ff024685920b3ec57327d8341554
SHA-256: 1fc17d01662bc21c93212006fc3df5bbc038e5136c2269c7fe0385f9e9528ba9
Release notes
This release addresses an access bypass security issue, DRUPAL-SA-2007-020. Sites that try to restrict access to issues based on the 'access project issues' or 'access own project issues' permissions should upgrade immediately.
Other changes since 4.7.x-1.3:
- #130390 by Heine: file_check_directory() takes a reference.
- #132025 by doc: fix encoding of issue followup data (it's a binary column in the schema, not a string) to remove SQL errors on pgsql.
- #110822 by doq (really from #138020): Fix wrong multibite truncation.
- #137435 (debugged by Sean B Fuller and yched, patch by dww): unnecessary call to node_load() while we're in the middle of hook_insert() results in empty CCK cache data for new issues.
- #152789 by aclight: Fix breadcrumbs on project/issues page
- #97207 by aclight: Fixed breadcrumb on followup form page.
- #155996 by dww: Removed MyISAM settings from MySQL statements.
- #103798 by plumbley and dww: Fixed PHP notices for E_ALL compliance.
- #157517 by hass and dww: Fixed a few translation problems.
- Fixing yet more translation problems.
- #159471 by hass: Table header name incomplete (s/Pri/Priority/).
- #163102 by dww: Removed stray whitespace (backport via perl 1-liner).
- Fixed weird PHP5 problem where we needed {} around a variable name so we could address it like an array.
- Moving TODO list to wiki page: http://groups.drupal.org/node/5489
- #165975 by hunmonk. fatal error when adding new project issue status in postgres. manually set the sequence to the correct starting value.
- #159544: "Submit" is too general for translations, so we're now using "Create" for various menu items and links (backport by bdragon).
- #106654 by drewish: Added missing index on {project_issues}.sid (backport by dww).
- #164958 by drewish and dww: Added missing pgsql indexes.
- #104190 by hunmonk -- Submit issues cannot find projects. check for missing projects when modules is installed, and insert them if missing. since 4.7 doesn't have a hook_enable(), this only fixes the issue on a clean install.
- #107706 by hunmonk: make query use index. added index on nid, assigned to project_issues table.
- #159286 by dww: Fixed problems with how file extension whitelists work and made the default extensions visible in the settings UI.
- #59039 by hunmonk: attachements missing after pressing preview. use file_check_upload() in form builder to check for uploaded file. this works for both cases, and since the function caches it's results, it won't cause problems when it's called again during validate.
- #114281 and #168760 (SA-2007-020) by dww: Fixed numerous access bugs.