Releases for OpenPublic

Update Drupal core 7.65 for Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004

Sorry, this release was actually the same as 7.x-1.25

Update for Link - Critical - Remote Code Execution - SA-CONTRIB-2019-020

Changes since 7.x-1.21:

• Update Drupal core 7.60

Changes since 7.x-1.18:

• Update core 7.59

Update to Core 7.57.

Note: The Views update in OpenPublic 7.x-1.13 is sufficient, but this update takes the extra step of ensuring all views have default permissions.

Changes since 7.x-1.13:

• Add "View Content" default permission to views
• Fix minor strict var warning in openpublic_multimedia_preprocess_views_view_field

Updated Drupal core to 7.56

Changes since 7.x-1.9:

• Update Core to 7.50

SECURITY RELEASE ONLY

This release only contains update for security release to the following modules

• Drupal Core: 7.43
• Field Group: 7.x-1.15

Changes since 7.x-1.5:

• #2390321: Update core and views for security

This module updates that have received security updates (context, google analytics). If you have manually updated those modules, no need to update.

This contains an update to drupal core for SA-CORE-2014-005 - Drupal core - SQL injection

Updating core for security issue.

Note that there is some development modules included that will be removed upon stable release.

Fixing a regression with the home rotator.

Please read RC1 notes if upgrading from previous beta versions

Beta to beta is not well tested or supported. Please be careful when updating. Remember to take a backup of both your database and code.

Update ctools and openomega for security releases

Dev Release

Warning! Security Changes
=========================

OpenPublic Beta 18 disables OpenPublic's normal password policy settings. You need to follow the instructions below to re-install the password features or the new security features.

For more information on this change, see http://www.phase2technology.com/blog/heads-up-the-next-openpublic-releas...

Updates
=========================

* Password Policy is now disabled, and OpenPublic Password or OpenPublic Security apps can be installed for advanced security features. See below for instructions on installing one of these apps
* Modules updated for security: CAPTCHA, Entity API, Features, and Webform

Upgrade Instructions
=========================

In order to upgrade OpenPublic, do the following:

1. Download the latest release of OpenPublic
2. Unpack it and copy the the profiles directory over your current profiles directory (replace the older files)
3. Run update.php to update the database

Re-Enabling Password Policies
=========================

1. After you upgrade your site, login
2. Select "Apps" from the admin shortcut bar
3. Find and then select OpenPublic Password in the app listing (or "Security" if you would like the more advanced features)
4. On the App's detail screen, select "Install App"

the beta15 was missing the upgrade of colorbox
This includes colorbox going to 1.5

OpenPublic Beta 14 is a minor maintenance release of OpenPublic to keep the distribution up to date.

# Updates

* Updated SiteMap XML Module
* Updated the Secure Pages Modules to the latest Stable Release
* Updated to Features 2.0

# Fixes

* OpenOmega has been moved into the OpenPublic Repository

# Upgrade Recommendations

We recommend the following procedure to upgrade an OpenPublic site, but of course you should backup and do a test to ensure you don't run into any problems:

Updated core, twitter pull and reCAPTCHA

The focus for this release of OpenPublic has been improving the installation experience and the site building experience. Phase2 has been using OpenPublic in several high profile projects, and this work has been contributing back to OpenPublic to make it a more flexible, easier to work with distribution.

# Focus Areas

* Installation of OpenPublic
* Installation of Apps
* OpenPublic Dependencies Management
* Bug Fixes

# Improvements

* Improvements to Omega Base Theme
* Added Features Override
* Added a "Skip Comments" link to improve accessibility
* Removed unused permissions and terms
* Improvements for D.O based Builds and new D.O Distribution Support
* Improvements to OpenPublic Defaults to remove unnecessary dependencies and separate out functionality
* Improvements to the Make File to improve builds

# Updates

* Updated Drupal Core to the latest security release
* Updated modules with security patches
* Updated to latest version of the Apps Module
* Updated to 1.0 version of Boxes
* Updated Context UI (separate for scrollable, dynamically sized UI)
* Additional Updates to included Modules as needed

# Resolved Issues

* Issue #1632916: Edit Box modal dialog fails with JS error in IE7 and IE8
* Issue #1612276: Unable to type in CKEditor popup fields for image, link in 'Edit Box' popup