The release fixes an arbitrary file upload issue. See SA-2008-015 for details.
Changes since DRUPAL-4-7:
- #72235 - fixed incompatability with private download method by creating a hook_file_download and designated comment u
- fix table prefixes in .install
- #88495 - make sure files and table entries are deleted when the parent node is removed.
- Improved README.txt
- #111931 - don't save to sequences, when there are no comment uploads to be upgraded
- #110962 - Support PostgreSQL, make sure MySQL definition matches.
- #113585 - fix sql error in create table statement
- #113258 - Backported support for multiple inline images
- #126312 - records were removed but actual files were not deleted, due to a missing file_delete.
- #216024 (SA-2008-015) - cast $comment to an object before passing it to validation routines.