Security update

The last Drupal 7 beta? WE SURE HOPE SO!

Changes since DRUPAL-7-0-BETA2:

Security release for SA-CONTRIB-2010-103 - Node Relativity - Multiple vulnerabilities

Security release for SA-CONTRIB-2010-103 - Node Relativity - Multiple vulnerabilities

Fixed t() calls
Applied performance patch 939796

Fix for Session reuse hack

This release includes the fix for an important bug (#810534: Fix CAPTCHA session reuse), which made it possible to reuse CAPTCHA sessions and lowered the barrier to entry for spam bots. The fix is a rather big change, including a database change, so do not forget to run the update.php script.

For more info: also see the release notes for CAPTCHA 6.x-2.3-RC1 and CAPTCHA 6.x-2.3-RC2.

Minor changes since DRUPAL-6--2-3-RC2:

• typo in German translation (reported by GraemeB)
• #766190: Added button to admin page to clear the CAPTCHA placement cache
• added a touch of extra sanitizing of raw posted data
• #881156 by vivekkhurana: disable autocompletion on CAPTCHA response fields
• #780206: Add warning to Performance settings page about CAPTCHA and caching
• #780206: added warning during installation about page caching and CAPTCHA

All changes since DRUPAL-6--2-2:

Major:

• #810534 by soxofaan: fixed CAPTCHA session reuse hack

Issues addressed in Outline Designer 1.2 :
* Fix for SA-CONTRIB-2010-105 - Outline Designer - Cross Site Request Forgery
* Added ability to change theme of context menu (on usability page)