Downloads

Download project_issue-4.7.x-2.4.tar.gztar.gz 36.71 KB
MD5: 89fad5d8f96167c4daaafe9a40fa8f15
SHA-1: eee8cc0036a036a4e6884d3f4b998091766b726e
SHA-256: 3c5660b0127655804cdc32c865562f022bf15eafc1e9697968e8ad6469ce06fd
Download project_issue-4.7.x-2.4.zipzip 41.26 KB
MD5: 0e89bb3f30e0d645e1cea3332828845a
SHA-1: 8cf71dfd056f35c802dffb2abcd927f66341cb7e
SHA-256: d18778789bbf5646254360f8fa2a896a57aa9eebe8f0b9390549a5dda0a5ae2e

Release notes

This release addresses an access bypass security issue, DRUPAL-SA-2007-020. Sites that try to restrict access to issues based on the 'access project issues' or 'access own project issues' permissions should upgrade immediately.

Other changes since 4.7.x-2.3:

  • #130390 by Heine: file_check_directory() takes a reference.
  • #132025 by doc: fix encoding of issue followup data (it's a binary column in the schema, not a string) to remove SQL errors on pgsql.
  • #110822 by doq (really from #138020): Fix wrong multibite truncation.
  • #137435 (debugged by Sean B Fuller and yched, patch by dww): unnecessary call to node_load() while we're in the middle of hook_insert() results in empty CCK cache data for new issues.
  • #152789 by aclight: Fix breadcrumbs on project/issues page
  • #97207 by aclight: Fixed breadcrumb on followup form page.
  • #155996 by dww: Removed MyISAM settings from MySQL statements.
  • #103798 by plumbley and dww: Fixed PHP notices for E_ALL compliance.
  • #121265 by augustd and dww: Users with limited status permissions should not change the status when replying to an issue in a restricted status.
  • #157517 by hass and dww: Fixed a few translation problems.
  • Fixing yet more translation problems.
  • #159471 by hass: Table header name incomplete (s/Pri/Priority/).
  • #163102 by dww: Removed stray whitespace (backport via perl 1-liner).
  • Fixed weird PHP5 problem where we needed {} around a variable name so
    we could address it like an array.
  • - Moving TODO list to wiki page: http://groups.drupal.org/node/5489
    - Adding hunmonk as a co-maintainer
  • #165975 by hunmonk. fatal error when adding new project issue status in postgres. manually set the sequence to the correct starting value.
  • #159544: "Submit" is too general for translations, so we're now using "Create" for various menu items and links (backport by bdragon).
  • #106654 by drewish: Added missing index on {project_issues}.sid (backport by dww).
  • #164958 by drewish and dww: Added missing pgsql indexes.
  • #104190 by hunmonk -- Submit issues cannot find projects. check for missing projects when modules is installed, and insert them if missing. since 4.7 doesn't have a hook_enable(), this only fixes the issue on a clean install.
  • #107706 by hunmonk: make query use index. added index on nid, assigned to project_issues table.
  • #159286 by dww: Fixed problems with how file extension whitelists work and made the default extensions visible in the settings UI.
  • #59039 by hunmonk: attachements missing after pressing preview. use file_check_upload() in form builder to check for uploaded file. this works for both cases, and since the function caches it's results, it won't cause problems when it's called again during validate.
  • #114281 and #168760 (SA-2007-020) by dww: Fixed numerous access bugs.
Created by: dww
Created on: 19 Aug 2007 at 23:52 UTC
Last updated: 1 Aug 2018 at 19:35 UTC
Security update
Bug fixes
Insecure

Other releases