project_issue 4.7.x-1.4

dww - August 19, 2007 - 23:52
Official release from CVS tag: DRUPAL-4-7--1-4
Download: project_issue-4.7.x-1.4.tar.gz
Size: 35.81 KB
md5_file hash: 8ee4cc34562de787fecb5919ea5ca3eb
First released: August 19, 2007 - 23:52
Last updated: August 19, 2007 - 23:55

This release addresses an access bypass security issue, DRUPAL-SA-2007-020. Sites that try to restrict access to issues based on the 'access project issues' or 'access own project issues' permissions should upgrade immediately.

Other changes since 4.7.x-1.3:

  • #130390 by Heine: file_check_directory() takes a reference.
  • #132025 by doc: fix encoding of issue followup data (it's a binary column in the schema, not a string) to remove SQL errors on pgsql.
  • #110822 by doq (really from #138020): Fix wrong multibite truncation.
  • #137435 (debugged by Sean B Fuller and yched, patch by dww): unnecessary call to node_load() while we're in the middle of hook_insert() results in empty CCK cache data for new issues.
  • #152789 by aclight: Fix breadcrumbs on project/issues page
  • #97207 by aclight: Fixed breadcrumb on followup form page.
  • #155996 by dww: Removed MyISAM settings from MySQL statements.
  • #103798 by plumbley and dww: Fixed PHP notices for E_ALL compliance.
  • #157517 by hass and dww: Fixed a few translation problems.
  • Fixing yet more translation problems.
  • #159471 by hass: Table header name incomplete (s/Pri/Priority/).
  • #163102 by dww: Removed stray whitespace (backport via perl 1-liner).
  • Fixed weird PHP5 problem where we needed {} around a variable name so we could address it like an array.
  • Moving TODO list to wiki page: http://groups.drupal.org/node/5489
  • #165975 by hunmonk. fatal error when adding new project issue status in postgres. manually set the sequence to the correct starting value.
  • #159544: "Submit" is too general for translations, so we're now using "Create" for various menu items and links (backport by bdragon).
  • #106654 by drewish: Added missing index on {project_issues}.sid (backport by dww).
  • #164958 by drewish and dww: Added missing pgsql indexes.
  • #104190 by hunmonk -- Submit issues cannot find projects. check for missing projects when modules is installed, and insert them if missing. since 4.7 doesn't have a hook_enable(), this only fixes the issue on a clean install.
  • #107706 by hunmonk: make query use index. added index on nid, assigned to project_issues table.
  • #159286 by dww: Fixed problems with how file extension whitelists work and made the default extensions visible in the settings UI.
  • #59039 by hunmonk: attachements missing after pressing preview. use file_check_upload() in form builder to check for uploaded file. this works for both cases, and since the function caches it's results, it won't cause problems when it's called again during validate.
  • #114281 and #168760 (SA-2007-020) by dww: Fixed numerous access bugs.
 
 

Drupal is a registered trademark of Dries Buytaert.