Releases for Drupal core

Release notes

The nineteenth maintenance release of the Drupal 6 series. Only bugfixes have been committed. No security fixes are included in this release. New features are only being added to the forthcoming Drupal 7.0 release.

This release includes the security fixes from Drupal 6.18 which was released alongside Drupal 6.19. No additional security fixes are included.

The complete list of changes committed since Drupal 6.17 are as follows:

• #521370 by Damien Tournoud, marcingy, andypost: watchdog hook invocations should be ordered by weight, not name
• #828706 by oadaeh: use module_load_install() instead of module_load_include() in drupal_get_schema_unprocessed()
• #341136 by bwynants, jvandervort: taxonomy selection too dependent on node preview being present
• #826864 by mr.baileys: improve documentation for decode_entities()
• #360605 followup by Berdir, gpk: improve PHP 5.3 compatibility for misconfigured hosts even
• #824102 by cwgordon7: provide access callback for contrib token implementations too

Release notes

Changes since DRUPAL-7-0-ALPHA5:

• Drupal has a new core theme: Bartik!
• Numerous fixes to the upgrade path, including basic tests. Getting very close! :)
• Numerous important security fixes.
• Numerous accessibility improvements.
• Setting up Private files is now optional, rather than required.
• Registry made more fool-proof and robust.
• Redesign of Field UI "Manage Display" screen, to reflect multiple view modes. Field UI screens are now also extensible from contrib.
• Re-implementation of Overlay without jQuery UI, to address numerous critical issues.
• User creation setting now defaults to "Visitors, with admin approval" for security.
• Installation will no longer fail when settings.php is not present. Nice usability improvement.
• Required modules are once again shown on the modules page.
• Many improvements to input formats and filters.
• Table prefixes are now per-database connection, rather than global.

Release notes

Numerous upgrade path fixes.
Numerous security path fixes.
Numerous API documentation additions -- all core hooks are documented now!
Lots and lots of critical bug fixes.

Release notes

Changes since DRUPAL-7-0-ALPHA2:

• Drupal 7 now ships with jQuery 1.4.2 and jQuery UI 1.8.
• API change: AJAX commands are now defined as array('#type' => 'ajax', '#commands' => $output) rather than array('#type' => 'ajax_commands', '#ajax_commands' => $output).
• API change: There is a new form element #type 'text_format', should be used for textareas with format selectors (e.g. body fields).
• page--front.tpl.php works again.
• Bug where IE quits displaying any CSS after 31+ stylesheets now fixed.
• The "Add" link now shows up for blocks. :P
• Now, running drupal_execute() multiple times on forms will validate each time, instead of only the first one.
• UI for translatable fields removed, in favour of contributed module.
• MAINTAINERS.txt now actually approximates the truth.
• Numerous upgrade path fixes.
• Numerous documentation fixes and documentation holes filled.
• Numerous markup fixes and improvements.
• Various performance improvements, especially around data import.
• Numerous security fixes, including both forward-ports of 6.x holes and plugging a D7-only one where Drupal 7 was storing plain-text copies of passwords in user.data under certain conditions.

Release notes

The sixteenth maintenance and security release of the Drupal 6 series. Only fixes for security vulnerabilities and other bugs have been committed. New features are only being added to the forthcoming Drupal 7.0 release.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

• SA-CORE-2010-001 - Drupal Core - Multiple vulnerabilities

In addition to this security vulnerability, the following bugs have been fixed since the 6.15 release:

• #673974 by sun: PHP notice when mass-unpublishing or deleting comments, and wrong form validation redirect
• #424372 by mr.baileys, bombatower, Arancaytar: :: in .info files caused fatal error, use list of constants for lookup instead
• #370958 by Rob Loach, drewish, c960657, neilnz: some Adobe Flash MIME types were missing from our MIME listing
• #284392 follow up by benoitg, brianV, mathieu, evoltech, tyr, Steven Jones, agentrickard, bl444137: better fix for issues around SQL rewrites adding DISTINCT

Release notes

TODO

Release notes

The twenty-first maintenance and security release of the Drupal 5 series. Only fixes for security vulnerabilities and other bugs have been committed. New features are only being added to the forthcoming Drupal 7.0 release.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

• SA-CORE-2009-009 - Drupal Core - Cross site scripting

Release notes

The fourteenth maintenance and security release of the Drupal 6 series. Only fixes for security vulnerabilities and other bugs have been committed. New features are only being added to the forthcoming Drupal 7.0 release.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

• SA-CORE-2009-008 - Drupal core - Multiple vulnerabilities

In addition to this security vulnerability, the following bugs have been fixed since the 6.13 release:

• #482646 follow up by Dave Reid: only check the db prefix for simpletest if it was a string (not running a multisite)
• #284392 by Passionate_Lass, Anselm Heaton, tassoman, agentrickard: DISTINCT handling in db_distinct_field()'s MySQL implementations was resulting in bogus queries
• #310139 by fonant, c960657, pwolanin: drupal_urlencode() and Drupal.encodeURIComponent was used to encode query strings and other components it should not have been used for
• #499254 by chx: Drupal lacked support for positive integer values in database queries, beyond PHP_INT_MAX; caused issues with twitter integration and big numbers in general

Release notes

The nineteenth maintenance and security release of the Drupal 5 series. Only fixes for security vulnerabilities and other bugs have been committed. New features are only being added to the forthcoming Drupal 7.0 release.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

• SA-CORE-2009-007 Drupal core - Multiple vulnerabilities