Drupal 8.6.5 is now available. This release includes bug fixes.

Drupal 8.6.5 Changelog

Drupal | Portal/ CMS

Changes since 8.6.4

• #3023402 by alexpott: \Drupal\Tests\Component\Datetime\DateTimePlusTest fails on latest PHP7.3 build
• #3001997 by Krzysztof Domańskii, scott_euser, alexpott: Transliteration a string containing an unknown character (e.g. 0x80) is not valid
• #3018942 by welly, alexpott, jibran, Krzysztof Domańskii, floydm: Domain URL language detection – InvalidArgumentException: The user-entered
• string must begin with a ‘/’, ‘?’, or ‘#’
• #3020902 by Berdir, alexpott: PostgresqlDateSql fails to serialize
• Revert “Issue #2986725 by Mile23, devitate, alexpott: doctrine common 2.9 has moved reflection”
• #3022183 by wengerk, benjifisher: Fix BlockContentAccessHandlerTest::providerTestAccess wrong coverage by early return
• #2984072 by vijaycs85, Lendude, ApacheEx, dawehner: System: Convert ErrorHandlerTest to phpunit
• #3019706 by hchonov, alexpott, sheanhoxie, jibran, dawehner: Functional JS Tests are broken if XDEBUG_CONFIG is set as an env variable
• Revert “Issue #3019706 by hchonov, jibran: Functional JS Tests are broken if XDEBUG_CONFIG is set as an env variable”
• #3021204 by maxocub: Remove maxocub from Migrate maintainers
• #3019706 by hchonov, jibran: Functional JS Tests are broken if XDEBUG_CONFIG is set as an env variable
• #2986725 by Mile23, devitate, alexpott: doctrine common 2.9 has moved reflection
• #2939908 by kjay, steveparks, spitzialist, cferthorney, danharper, Eli-T: Add an article to Umami – Dairy-free chocolate
• #3007439 by tim.plunkett, Wim Leers, xopoc: Layout builder renders Book navigation block on non-book pages
• #2927768 by justinlevi, Lendude, pritish.kumar, Wim Leers, dawehner: Update RestRegisterUserTest to use the ResourceTestBase base class instead of the deprecated RESTTestBase
• #3020550 by catch: Passing commands as a string to Process is deprecated in Symfony 4
• #3020579 by catch: TypeError: Argument 3 passed to Symfony\Component\HttpKernel\Event\FilterResponseEvent::__construct() must be of the type integer, string given [Symfony 4]
• #2618606 by dawehner, rbayliss: Update.php – Reverse proxy settings not used
• #2865344 by mpdonadio, Lendude, mbovan, organicwire, alexpott, jibran, jhedstrom, bobemoe, Berdir, larowlan: Exposed date filters ’empty’ and ‘not empty’ are broken
• #2974274 by mitrpaka, RumyanaRuseva, joachim: exception message for unrecognized source IDs in lookupDestinationIds() should have more detail
• #2809305 by Upchuk, Pavan B S, Jo Fitzgerald, tim.plunkett, Berdir: Block Context assignment form element shows even if no options are available
• #3018774 by xjm: hook_post_update_NAME() docs do not explain batching/ parameter
• #3018539 by phenaproxima, rodrigoaguilera, alexpott: Media types cannot be created in the UI without JavaScript
• #3018764 by Wim Leers: One test case in MediaUiFunctionalTest is not actually tested due to a duplicate key
• #2998462 by AndyF, Baysaa, Siavash, tim.plunkett, millionleaves, fatmarker: Error adding Content Type Selection criteria or Context
• #3016501 by govind.maloo, andrewmacpherson, markconroy: Writing style – Umami should be capitalised when it is used as a proper noun in English
• #2916595 by phenaproxima, AdamPS, Wim Leers: File element discards attributes if #multiple
• #2883260 by kiamlaluno, yogeshmpawar, msankhala, benjifisher, alexpott, bdlangton: Replace the schema example with one actually used from a module
• #2883553 by govind.maloo, msankhala, seanB, Berdir, xjm, alexpott: Obsolete argument for hasPermission in node_node_access()
• #3016011 by mikelutz, quietone, alexpott: Reroll all migrate dump files
• #3017753 by mxr576, alexpott: MemoryBackend should validate the passed cids

More Information

The post Drupal 8.6.5 | Update Release appeared first on Orange Internet Solutions.

“Drupal 7.31 this release fixes security vulnerabilities.”

Drupal 7.31 is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration, publishing workflow, discussion capabilities, news aggregation, metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.

Equipped with a powerful blend of features and configurability, Drupal 7.31 can support a diverse range of web projects ranging from personal weblogs to large community-driven sites.

Changes Details

• As of this release, the XML-RPC system in Drupal core will ignore information in <?xml> declarations contained within XML-RPC messages (for example, XML version or character encoding information). This is not expected to matter for the vast majority of use cases.
• The XML-RPC system and OpenID XRDS parser will also reject messages that contain over 30,000 XML tags within them. This limit is not expected to matter for the vast majority of use cases. If you need to process an XML-RPC message that is larger than that, you can change the limit by setting the “xmlrpc_message_maximum_tag_count” variable to a higher value. For example, in settings.php:
  <?php // Allow XML-RPC messages with up to 50,000 XML tags to be
  processed. $conf[‘xmlrpc_message_maximum_tag_count’] = 50000; ?>

  Do not set the value higher than you need, since allowing too many XML tags per XML-RPC message increases your site’s vulnerability to denial of service attacks.

  The OpenID XRDS parser has a similar variable (“openid_xrds_maximum_tag_count”) which can be used in a similar way.

[otw_is sidebar=otw-sidebar-8]

The post Drupal 7.31 Update Released appeared first on Orange Internet Solutions.

“Drupal 6 6.33 this release fixes security vulnerabilities.”

Drupal 6 6.33 is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration, publishing workflow, discussion capabilities, news aggregation, metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.

Equipped with a powerful blend of features and configurability, Drupal 6 6.33 can support a diverse range of web projects ranging from personal weblogs to large community-driven sites.

Changes Details

• As of this release, the XML-RPC system in Drupal core will ignore information in <?xml> declarations contained within XML-RPC messages (for example, XML version or character encoding information). This is not expected to matter for the vast majority of use cases.
• The XML-RPC system and OpenID XRDS parser will also reject messages that contain over ~30,000 XML tags within them. This limit is not expected to matter for the vast majority of use cases. It is also only an approximate limit, since Drupal 6 is not capable of efficiently counting the exact number of XML tags. If you need to process an XML-RPC message that is larger than that, you can change the limit by setting the “xmlrpc_message_maximum_tag_count” variable to a higher value. For example, in settings.php:
  <?php // Allow XML-RPC messages with up to ~50,000 XML tags to be
  processed. $conf[‘xmlrpc_message_maximum_tag_count’] = 50000;?>
  Do not set the value higher than you need, since allowing too many XML tags per XML-RPC message increases your site’s vulnerability to denial of service attacks.

  The OpenID XRDS parser has a similar variable (“openid_xrds_maximum_tag_count”) which can be used in a similar way.

• As a consequence of the security fixes in this release, sites using the OpenID module will reject login attempts from OpenID servers which return an XRDS file with a declared DOCTYPE (due to the possibility of malicious DOCTYPE declarations). A DOCTYPE declaration is not part of the OpenID specification, so this is not expected to cause any problems for valid OpenID servers (this is also the same restriction that was earlier added to Drupal 7 to fix a different security issue; see SA-CORE-2012-003 and the Drupal 7.16 release notes). However, sites using unusual or custom OpenID servers may wish to test OpenID logins before deploying this release.

[otw_is sidebar=otw-sidebar-8]

The post Drupal 6 6.33 Update Released appeared first on Orange Internet Solutions.