#844148: fixed call-time pass-by-reference problem in update function
various minor tweaks (syncing some stuff back from DRUPAL-7--1 branch)
Why is this release a RC (release candidate)?
This release includes the fix for an important bug (#810534: Fix CAPTCHA session reuse), which made it possible to reuse CAPTCHA sessions and lowered the barrier to entry for spam bots. The fix is a rather big change, including a database change, so do not forget to run the update.php script.
Because the change is rather big, I wanted to be sure the fix didn't break a lot of other things. In the first place, I provided simpletest coverage for the bug, albeit limited to the CAPTCHA protection of some Drupal core forms (login form, comment form and node form). However, I wanted also some manual testing on real world sites and use cases, but I got only one (positive) response in #810534: Fix CAPTCHA session reuse.