Download drupal-6.6.tar.gztar.gz 1.02 MB
MD5: caaa55d1990b34dee48f5047ce98e2bb
SHA-1: 08c12b590508d2050e3c2be0faf48b98a964ea45
SHA-256: 48a5d3c6567b10f401fc7ca8b7dfb0fee22745d77f28992964bc9be80aaa7965
Download drupal-6.6.zipzip 1.2 MB
MD5: 28f2fbb871aa1e023c4377ba6ee8fbb1
SHA-1: 5f986683066ecd94457d52c9520fe3ffc3d949b7
SHA-256: b25a21d3e817115e5fee1ad7f3eaaf924e56714b76e5ee7f485e8c3c329dbc94

Release info

Created by: Gábor Hojtsy
Created on: 22 Oct 2008 at 19:27 UTC
Last updated: 22 Oct 2008 at 19:39 UTC
Core compatibility: 6.x
Release type: Security update, Bug fixes

Release notes

The sixth maintenance and security release of the Drupal 6 series. Only fixes for security vulnerabilities and other bugs have been committed. New features are only being added to the forthcoming Drupal 7.0 release.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

In addition to this security vulnerability, the following bugs have been fixed since the 6.5 release:

  • - Patch #315656 by Damien Tournoud: fixed bug in drupal_lookup_path('wipe').
  • - Patch #285165 by Heine, Gabor: fixed wildcard loader names with numbers.
  • #285165 follow up by Damien Tournoud, pwolanin, chx: fixed wildcard loader problem
  • - Patch #293078 by lilou: correction for user-profile.tpl.php documentation.
  • - Patch #321165 by Dave Reid: fixed exceptions in XML-RPC library. Backported from CVS HEAD.
  • #260372 by andershal and nedjo: All translations were removed from translation set when deleting a node and only two nodes are left.
  • #284887 by Dave Reid, dww: Avoid a 403 on autocomplete fields, when people do not have access to the path used for autocompletion; by disabling the autocomplete altogether in this case.
  • #317238 by Pedro Lozano: Fix incorrect path to remove orphaned actions.
  • #318102 by Dave Reid: hook_exit() was not invoked for some cached requests.
  • - Patch #316753 by dvessel: exanded PHP doc of path_to_theme().
  • - Patch #320793 by hass: fixed translation issue.
  • #319769 reported by Pasqualle, patch by Dave Reid: drupal_init_language() should be called before drupal_maintenance_theme() in _db_error_page() to ensure that the language object exists on DB error pages.
  • #295626 by Damien Tournoud, wuf31, drewish: locale_block() generated incorrect paths for frontpage links
  • #20527 by mpare, bdragon, mfb: file_transfer() should only call ob_end_clean() if there was an actual output buffer opened
  • #320146 by pwolanin: little usability tweak to link the site offline admin message to the maintenance settings page
  • #293612 by egfrith, Bart Jansens: let user_authenticate() be called without cookies previously set; allows web service modules to start a session with the authentication
  • - Patch #302518 by AlexisWilke: fixed problem with PostgreSQL users not being able to delete blocks.
  • #277206 by Damien Tournoud, lilou, fp: untranslatable string in the installer
  • #249571 by pwolanin: Primary/secondary links did not get the 'active-trail' class properly on the list items
  • - Patch #324080 by winterheart: missing </td>-tag.


The selected release is the release that will be used for automated testing. Optional projects are only used for testing.


No required projects


No optional projects