diff options
author | Gábor Hojtsy <gabor@hojtsy.hu> | 2007-10-17 21:47:14 +0000 |
---|---|---|
committer | Gábor Hojtsy <gabor@hojtsy.hu> | 2007-10-17 21:47:14 +0000 |
commit | a3f3cb346bebb09dd89f31705c43c0c7d5c690d1 (patch) | |
tree | afdf7c9e25ac03eae91fa15fc0328bd57474cbab /CHANGELOG.txt | |
parent | 988d4f505a8896df226660f37286c7f0bbe01e01 (diff) | |
download | brdo-a3f3cb346bebb09dd89f31705c43c0c7d5c690d1.tar.gz brdo-a3f3cb346bebb09dd89f31705c43c0c7d5c690d1.tar.bz2 |
Drupal 6.0-beta 2 release with all Drupal 5.3 security fixes applied
Diffstat (limited to 'CHANGELOG.txt')
-rw-r--r-- | CHANGELOG.txt | 37 |
1 files changed, 36 insertions, 1 deletions
diff --git a/CHANGELOG.txt b/CHANGELOG.txt index 8bfc125fd..2b9f96946 100644 --- a/CHANGELOG.txt +++ b/CHANGELOG.txt @@ -1,6 +1,6 @@ // $Id$ -Drupal 6.0, xxxx-xx-xx (development version) +Drupal 6.0-beta2, 2007-10-17 ---------------------- - New, faster and better menu system. - New watchdog as a hook functionality. @@ -92,6 +92,27 @@ Drupal 6.0, xxxx-xx-xx (development version) - Removed drupal.module. The functionality lives on as the Site network contributed module (http://drupal.org/project/site_network). +Drupal 5.3, 2007-10-17 +---------------------- +- fixed a variety of small bugs. +- fixed a security issue (HTTP response splitting), see SA-2007-024 +- fixed a security issue (Arbitrary code execution via installer), see SA-2007-025 +- fixed a security issue (Cross site scripting via uploads), see SA-2007-026 +- fixed a security issue (User deletion cross site request forgery), see SA-2007-029 +- fixed a security issue (API handling of unpublished comment), see SA-2007-030 + +Drupal 5.2, 2007-07-26 +---------------------- +- changed hook_link() $teaser argument to match documentation. +- fixed a variety of small bugs. +- fixed a security issue (cross-site request forgery), see SA-2007-017 +- fixed a security issue (cross-site scripting), see SA-2007-018 + +Drupal 5.1, 2007-01-29 +---------------------- +- fixed security issue (code execution), see SA-2007-005 +- fixed a variety of small bugs. + Drupal 5.0, 2007-01-15 ---------------------- - Completely retooled the administration page @@ -169,6 +190,20 @@ Drupal 5.0, 2007-01-15 * Added nested lists generation. * Added a self-clearing block class. +Drupal 4.7.8, 2007-10-17 +---------------------- +- fixed a security issue (HTTP response splitting), see SA-2007-024 +- fixed a security issue (Cross site scripting via uploads), see SA-2007-026 +- fixed a security issue (API handling of unpublished comment), see SA-2007-030 + +Drupal 4.7.7, 2007-07-26 +------------------------ +- fixed security issue (XSS), see SA-2007-018 + +Drupal 4.7.6, 2007-01-29 +------------------------ +- fixed security issue (code execution), see SA-2007-005 + Drupal 4.7.5, 2007-01-05 ------------------------ - Fixed security issue (XSS), see SA-2007-001 |