Downloads

Download tar.gz 51.91 KB
MD5: 10551c9f33816f3706e677d9fa79c3d0
SHA-1: c4a00dcc3e06335648d558f87d8e3884f644e057
SHA-256: c9e22bfe74feff179b7a5a10f4360ae864c0f5f077e2255a1fc0b7dc9b4b86e6
Download zip 62.51 KB
MD5: 4b63a414f4e25ee1fbf1ca84bf9aec39
SHA-1: 9c502de57fa812392be69e8875dacabd042a9eb9
SHA-256: 5aaac63055a9c7094e0e7c13da0db9a24c576f311efe8e52f41cbb215723c4a7

Release notes

This release addresses an access bypass security issue, DRUPAL-SA-2007-020. Sites that try to restrict access to issues based on the 'access project issues' or 'access own project issues' permissions should upgrade immediately.

Other changes since 5.x-0.2-beta:

  • #130390 by Heine: file_check_directory() takes a reference.
  • #126347: improper use of $may_cache in hook_menu() -- no links for project_issue.module in admin/by-module pages.
  • #137147 by Sean B Fuller (with cleanup by dww): Don't show the follow-up link if already following up to an issue.
  • #132025 by doc: fix encoding of issue followup data (it's a binary column in the schema, not a string) to remove SQL errors on pgsql.
  • #110822 by doq (really from #138020): Fix wrong multibite truncation.
  • #140896: remove dead code for project-issue vs. project_issue node/add.
  • #137435 (debugged by Sean B Fuller and yched, patch by dww): unnecessary call to node_load() while we're in the middle of hook_insert() results in empty CCK cache data for new issues.
  • #143726: Issue count on 'My projects' page includes unpublished issues.
  • #144349: provide weights for /project/issues and /project/user menu items.
  • #137135 by Sean B Fuller (with minor cleanup by dww): Support CCK fields on project_issue nodes that show up in the follow-up form.
  • #151342: removing version from .info in CVS in favor of cvs_deploy.module
  • #152789 by aclight: Fix breadcrumbs on project/issues page
  • #153390 by walkah: Use node_feed() for project issue feeds.
  • #153614: Make truncated issue names show full name in link title attribute.
  • #97207 by aclight: Fixed breadcrumb on followup form page.
  • #155996 by dww: Removed MyISAM settings from MySQL statements.
  • #103798 by plumbley and dww: Fixed PHP notices for E_ALL compliance.
  • #121265 by augustd and dww: Users with limited status permissions should not change the status when replying to an issue in a restricted status.
  • #157517 by hass and dww: Fixed a few translation problems.
  • Fixing yet more translation problems.
  • #159544 by hass: "Submit" is too general for translations, so we're now using "Create" for various menu items and links.
  • #102395 by aclight and dww: Made it clear when users can and can't create issues or follow-up by printing a "Login or register to ..." link for anonymous users in various parts of the UI, and fixing the logic when users attempt to do things they don't have permission for.
  • #159471 by hass: Table header name incomplete (s/Pri/Priority/).
  • #163102 by chx: Removed some stray whitespace.
  • Minor UI improvement: tweaked widths of columns on the "My projects" page to give the "Issue links" more space to avoid wrapping.
  • #163599 by pwolanin: Cleaned up menu callback insanity in project_issue_page().
  • #163599 by pwolanin: Fixed bug in previous patch for menu callback cleanup.
  • #163599: Reverting previous patches. They're still not quite right, and we're walking in a mine field here. This cleanup might involve something much more drastic in the relatively near future...
  • Fixed weird PHP5 problem where we needed {} around a variable name so we could address it like an array.
  • #103956: Removing some dead code that was added during the 5.x port.
  • Moving TODO list to wiki page: http://groups.drupal.org/node/5489
  • #165975 by hunmonk. fatal error when adding new project issue status in postgres. manually set the sequence to the correct starting value.
  • #106654 by drewish and hunmonk: Added missing index on {project_issues}.sid.
  • #166496 by dww: Added an implementation of hook_uninstall().
  • #142122 by killes, hunmonk and dww: Only users with valid e-mail addresses can now subscribe to issues.
  • #164958 by drewish and dww: Added missing pgsql indexes.
  • #104190 by hunmonk -- Submit issues cannot find projects. check for missing projects when modules is installed/enabled, and insert them if missing.
  • Modified CSS so that the project drop-down on the issue and follow-up form is fixed width, to protect the UI from insanely long project names.
  • #107706 by hunmonk: make query use index. added index on nid, assigned to project_issues table.
  • #167838 by dww: Fixed bug that was caused by trying to add CCK fields to the issue form, not the followup form (bug introduced via #137135).
  • #167797 by merlinofchaos: Devel page timer breaks JS callbacks for project_issue.js. set proper content type for the AJAX call.
  • #159286 by dww: Fixed problems with how file extension whitelists work and made the default extensions visible in the settings UI.
  • #59039 by hunmonk: attachements missing after pressing preview. use file_check_upload() in form builder to check for uploaded file. this works for both cases, and since the function caches it's results, it won't cause problems when it's called again during validate.
  • #114281 and #168760 (SA-2007-020) by dww: Fixed numerous access bugs.
Created by: dww
Created on: 19 Aug 2007 at 23:52 UTC
Last updated: 1 Aug 2018 at 19:44 UTC
Security update
Bug fixes
Insecure
Unsupported

Other releases