Changelog for drupal10-10.2.1-1.12.noarch.rpm :

* Fri Jan 12 2024 ecsos - Update to 10.2.1 This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. https://www.drupal.org/project/drupal/releases/10.2.1
* Tue Jan 02 2024 ecsos - Update to 10.2.0 This is a minor version (feature release) of Drupal 10 and is ready for use on production sites. https://www.drupal.org/project/drupal/releases/10.2.0
* Wed Sep 27 2023 ecsos - Update to 10.1.4 This is a security release of the Drupal 10 series. - Drupal core - Critical - Cache poisoning - SA-CORE-2023-006 https://www.drupal.org/project/drupal/releases/10.1.4- Changes from 10.1.3 This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. https://www.drupal.org/project/drupal/releases/10.1.3
* Fri Aug 11 2023 ecsos - Update to 10.1.2 This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. - cspell, eslint, and stylelint have been updated to later releases to address upstream security vulnerabilities. https://www.drupal.org/project/drupal/releases/10.1.2
* Wed Jul 26 2023 ecsos - Update to 10.1.1 This is a patch (bugfix) release of Drupal 10 and is ready for use on production sites. - CKEditor 5 has been updated to version 38.1.0. https://www.drupal.org/project/drupal/releases/10.1.1
* Fri Jul 07 2023 ecsos - Update to 10.1.0
* Mon Jun 05 2023 ecsos - Update to 10.0.9
* Mon Jun 05 2023 ecsos - Update to 9.5.9 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. - Improved support for PHP 8.2. - laminas/laminas-diactoros has been forked to fix a security issue while retaining compatibility with PHP 7.3 and 7.4. The forked package is called longwave/laminas-diactoros. https://www.drupal.org/project/drupal/releases/9.5.9- Changes from 9.5.8 This is a security release of the Drupal 9 series. - Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005 https://www.drupal.org/project/drupal/releases/9.5.8- Changes from 9.5.7 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. - Revert \"Issue #3344083 by longwave, ricardofaria, lauriii, Wim Leers, catch: Update CKEditor 5 to 36.0.1\" https://www.drupal.org/project/drupal/releases/9.5.7- Changes from 9.5.6 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. - CKEditor has been updated to version 36.0.1 - CKEditor 4 has been updated to version 4.21.0. - This release fixes a regression introduced in Drupal 9.5.5: #3348592: [regression] Language switcher block throws exception when no route is matched https://www.drupal.org/project/drupal/releases/9.5.6- Changes rom 9.5.5 This is a security release of the Drupal 9 series. - Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-002 - Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-003 - Drupal core - Moderately critical - Access bypass - SA-CORE-2023-004 https://www.drupal.org/project/drupal/releases/9.5.5- Changes rom 9.5.4 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. https://www.drupal.org/project/drupal/releases/9.5.4- Changes rom 9.5.3 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. https://www.drupal.org/project/drupal/releases/9.5.3- Changes rom 9.5.2 This is a security release of the Drupal 9 series. - Drupal core - Moderately critical - Information disclosure - SA-CORE-2023-001 https://www.drupal.org/project/drupal/releases/9.5.2- Changes rom 9.5.1 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. https://www.drupal.org/project/drupal/releases/9.5.4- Changes rom 9.5.0 This is the final minor version (feature release) of Drupal 9 and is ready for use on production sites. https://www.drupal.org/project/drupal/releases/9.5.0- Changes for 9.3.22 - 9.4.15 see: https://www.drupal.org/project/drupal/releases/9.3.22 - https://www.drupal.org/project/drupal/releases/9.4.15
* Wed Oct 05 2022 ecsos - Update to 9.3.22 This is a security release of the Drupal 9 series. - Drupal core - Critical - Multiple vulnerabilities - SA-CORE-2022-016 https://www.drupal.org/project/drupal/releases/9.3.22
* Fri Aug 12 2022 ecsos - Update to 9.3.21 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. - CKEditor 5 has been updated from 34.1.0 to 35.0.1 for a security update (CVE-2022-31175: Cross-site scripting (XSS) caused by the editor instance destroying process) https://www.drupal.org/project/drupal/releases/9.3.21
* Mon Aug 01 2022 ecsos - Update to 9.3.20 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. https://www.drupal.org/project/drupal/releases/9.3.20- Changes from 9.3.19 This is a security release of the Drupal 9 series. - Drupal core - Moderately critical - Information Disclosure - SA-CORE-2022-012 - Drupal core - Moderately critical - Access Bypass - SA-CORE-2022-013 - Drupal core - Critical - Arbitrary PHP code execution - SA-CORE-2022-014 - Drupal core - Moderately critical - Multiple vulnerabilities - SA-CORE-2022-015 https://www.drupal.org/project/drupal/releases/9.3.19- Changes from 9.3.18 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. https://www.drupal.org/project/drupal/releases/9.3.18- Changes from 9.3.17 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. https://www.drupal.org/project/drupal/releases/9.3.17
* Tue Jun 14 2022 ecsos - Update to 9.3.16 This is a security release of Drupal 9 series. Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-011 - CVE-2022-31042 - CVE-2022-31043
* Thu Jun 09 2022 ecsos - Update to 9.3.15 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. https://www.drupal.org/project/drupal/releases/9.3.15
* Wed Jun 01 2022 ecsos - Update to 9.3.14 This is a security release of the Drupal 9 series. This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements: Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-010 No other fixes are included.- Changes from 9.3.13 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. Learn more about Drupal 9.- Changes from 9.3.12 This is a security release of the Drupal 9 series. This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements: Drupal core - Moderately critical - Improper input validation - SA-CORE-2022-008 Drupal core - Moderately critical - Access bypass - SA-CORE-2022-009 No other fixes are included.- Changes from 9.3.11 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. Learn more about Drupal 9.- Changes from 9.3.10 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. Learn more about Drupal 9.
* Sun Apr 03 2022 ecsos - Update to 9.3.9 This is a security release of the Drupal 9 series. This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements: Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-006 No other fixes are included.- Changes from 9.3.8 This is a security release of the Drupal 9 series. This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements: Drupal core - Moderately critical - Third-party libraries - SA-CORE-2022-005 No other fixes are included.- Changes from 9.3.7 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites.- Changes from 9.3.6 Maintenance and security release of the Drupal 9 series. This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements: Drupal core - Moderately critical - Improper input validation - SA-CORE-2022-003 Drupal core - Moderately critical - Information disclosure - SA-CORE-2022-004 No other fixes are included.- Changes from 9.3.5 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites- Changes from 9.3.4 This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites.- Changes from 9.3.3 This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement: Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2022-001 No other fixes are included.
* Wed Jan 05 2022 Joop Boonen - Update to 9.3.2 Issue #3247619 by Lendude, danflanagan8, FiNeX, beatrizrodrigues: \"Place a colon after the label\" not working on grouping field label on views Issue #2879293 by digitaldonkey, tobiasb, Mac_Weber, paulocs, Meenakshi_j, stefan.korn, ranjith_kumar_k_u, longwave, alexpott: Make Link URI required if there is Link Text input Issue #3014629 by quietone, Wim Leers, xurizaemon: Document that Configuration migrations can depend on Content migrations Issue #3207907 by quietone, Berdir, alexpott: Ensure functional tests use the test mail collector Issue #3190261 by danflanagan8, doostinharrell, phenaproxima, larowlan, paulocs: MediaLibraryWidget can trigger an AJAX error if all media types can be referenced Issue #3256591 by yassermussa, Chi: Fix Element/Table documentation Issue #2916142 by beatrizrodrigues, Chi, yogeshmpawar, tobiberlin, quietone, borisson_: Decimal and Float item generates wrong sample values Issue #3213928 by RoSk0: LoggerChannelInterface documentation Issue #3256581 by cburschka: PHPdoc in update.authorize.inc Issue #2853183 by quietone, darvanen, slootjes, Munavijayalakshmi, himanshu-dixit, shubham.prakash, gaurav.kapoor, prash_98, alexpott, JohnAlbin: Correct references from Symfony Framework Issue #3175287 by murilohp, quietone, SivaprasadC, ankithashetty, anmolgoyal74, sarvjeetsingh, xjm, longwave: Remove accidentally duplicated words in code comments Issue #3174570 by quietone, anmolgoyal74, skudderk: Fix documentation comment in MainContentViewSubscriber Issue #3249859 by apaderno: The documentation page for NestedArray::unsetValue() shows example code that uses NestedArray::unset_nested_value() Issue #3251835 by beatrizrodrigues, joachim, mikelutz, quietone: Fix incorrect AATTreturn docs and description for Row::getSource() Issue #3131348 by Spokje, jungle, mondrake, vsujeetkumar, sja112, kishor_kolekar, Hardik_Patel_12, mrinalini9, yogeshmpawar, daffie: Replace assertions involving calls to empty() with assertEmpty()/assertNotEmpty()/assertArrayNotHasKey() Issue #3255504 by anagomes, Chi, cilefen: Remove jQuery dependency from date.js Issue #3136388 by dww, jyotimishra-developer, nitesh624: Fix phpdocs in core/lib/Drupal/Core/Database/Install/Tasks.php Issue #2675006 by danflanagan8, robpowell, quietone, alexpott: Write UnitTest for MigrationConfigurationTrait and fix Exception Handling Issue #3212470 by JeroenT, Gauravmahlawat: Placeholder CSS selector in off-canvas.reset.css is wrong Issue #2675006 by danflanagan8, robpowell, quietone: Write UnitTest for MigrationConfigurationTrait and fix Exception Handling Issue #3092430 by quietone, shrutidkadam, RdeBoer, bgprior, danflanagan8: Ensure SearchPlugin has a configuration array Issue #3205909 by kunal.sachdev, tedbow, phenaproxima: Ensure only needed permissions are used for Update module functional tests Issue #2793169 by Matroskeen, Manuel Garcia, anmolgoyal74, Pooja Ganjage, Abhijith S, Lendude, dww, quietone: hook_views_post_render provides inaccurate information Issue #3247039 by joachim, quietone: MigrateDestinationInterface::import() should document that it can throw a MigrateException Issue #3255836 by alexpott, clayfreeman, dww, benjifisher, Spokje: Test fails due to Composer 2.2 Issue #3247269 by Sakthivel M, mherchel: Olivero: Alignment of primary menu hover states and dropdowns is incorrect at wide widths Issue #3064890 by danflanagan8, mpp, mottihoresh, scott_euser, peonboyos, Kristen Pol, joshmiller: Notice: Undefined index: name in Drupal ield_uiement\\FieldUiTable::reduceOrder() (line 228 of /var/www/html/docroot/core/modules/field_ui/src/Element/FieldUiTable.php) Issue #3245383 by Beakerboy, daffie: If the database driver is provided by a module, it\'s name must be included in tests which check for enabled modules Issue #3251125 by Beakerboy, daffie, mondrake: Do not uninstall the database driver module within installer tests Issue #3248309 by danflanagan8: AssertBreadcrumbTrait should not rely on Classy Issue #3080819 by beatrizrodrigues, ankithashetty, lucienchalom, quietone, Vivek Panicker, catch: Missing documentation for \"core_version_requirements\" key in InfoParserInterface file Issue #3254403 by paulmckibben, ranjith_kumar_k_u, longwave, Lendude, cilefen: system_post_update_sort_all_config can exhaust PHP memory in 9.3.0 Issue #3253889 by BR0kEN, murilohp, longwave: `?check_logged_in=1` causes `TrustedRedirectResponse` to fail Issue #3246156 by realityloop, rachel_norfolk: Add Brian Gilbert (realityloop) as a full mentoring coordinator Issue #3246158 by rachel_norfolk, volkswagenchick: Add AmyJune Hineline (volkswagenchick) as a full mentoring coordinator Issue #3246157 by ChrisDarke, rachel_norfolk: Add Chris Darke (ChrisDarke) as a full mentoring coordinator Issue #3253568 by Spokje, paul121, rviner, longwave, alexpott, quietone: Error: Cannot use object of type Drupal\\Core\\Render\\Markup as array in Drupal\\Core\\Render\\Renderer->doRender() (line 218. When checkbox \'Use field template\' is checked Issue #3239287 by alexpott, longwave: Fix \\Drupal\\Coretension\\ModuleDependencyMessageTrait to not cause deprecations in PHP 8.1 Issue #3253683 by andypost, Spokje, Gábor Hojtsy: Improve compatibility with composer 2.2 Issue #3250648 by Beakerboy, daffie: Avoid comparing fields with different collations in SelectSubqueryTest Issue #3252067 by tedbow, Spokje: Remove duplicate loading of update reports after refreshUpdateStatus Issue #3253824 by juli sh, Matroskeen: Minor typo in d7_field_formatter_settings.yml comment
* Mon Dec 27 2021 Joop Boonen - Upgrade to drupal 9.3.0 as 8 isn\'t supported any more
* Wed Nov 24 2021 ecsos - Update to 8.9.20 Maintenance and security release of the Drupal 9 series. This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcement: Drupal core - Critical - Third-party library - SA-CORE-2021-011 For more information, see CKEditor\'s security advisories: - CVE-2021-41165: HTML comments vulnerability allowing to execute JavaScript code - CVE-2021-41164: Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
* Mon Sep 20 2021 ecsos - Update to 8.9.19 Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Moderately critical - Cross Site Request Forgery - SA-CORE-2021-006 Drupal core - Moderately critical - Cross Site Request Forgery - SA-CORE-2021-007 Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-008 Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-009 Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-010- Changes from 8.9.18 Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Critical - Third-party library - SA-CORE-2021-005
* Fri Jul 23 2021 ecsos - Update to 8.9.17 Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Critical - Third-party library - SA-CORE-2021-004
* Thu May 27 2021 ecsos - Update to 8.9.16 Maintenance and security release of the Drupal 8 series. This release fixes a security vulnerability. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2021-003- Changes from 8.9.15 This is a patch (bugfix) release of Drupal 8 and is ready for use on production sites. Learn more about Drupal 8. [#3209456] by kpa, piggito, mherchel: Update Underscore.js to the latest version (1.13.1) [#3211810] by alexpott, xjm, Spokje, Amber Himes Matz, Kristen Pol, lauriii: [security] Update Nightwatch and locked dev dependencies to address security issues [#3212177] by alexpott, lauriii: Update caniuse-lite as it is outdated [#3211805] by xjm, Kristen Pol, longwave: Update composer/composer dev dependency in metapackages to 2.0.13 Revert \"Issue #3211164 by alexpott: Random errors in Javascript Testing\" [#3211164] by alexpott: Random errors in Javascript Testing [#3128389] by clayfreeman, jungle, cliddell, john.oltman, acbramley, larowlan: [backport] LocaleTranslation is not serializable [#2571475] by mglaman, tstoeckler, tedbow, eiriksm, Jaesin, phenaproxima, alexpott: Outbound HTTP requests fail with KernelTestBase Back to dev. Merged 8.9.14. [#2958588] by cainaru, lauriii, DamienMcKenna, clayfreeman, longwave, galactus86, bkosborne, pawandubey, doublealpha, Blackstallion, alexpott, tim.plunkett, kpaxman, justcaldwell, mark_fullmer: Off-canvas style resets are overriding styles (especially SVGs) resulting in display issues [#3120301] by alexpott, zestagio, Wim Leers: RoutePreloader: prevent preloading of routes generated by JSON:API [#3207086] by benjifisher, larowlan, mondrake, Spokje: [HEAD BROKEN] Consistent failure in MonthDatePluginTest [#3202440] by jonathanshaw, ravi.shankar, catch, longwave: [backport] EntityQuery accessCheck: field ui cardinality validation should not be access sensitive [#3206540] by yechaozheng, longwave: Set access check to FALSE for entityQuery of user in user_is_blocked function [#3183301] by mcdruid, longwave, markwittens, nathandentzau, marcaddeo, janusman, -nrzr-, David_Rothstein, Heine, vijaycs85, xjm, tim.plunkett, pandaski, Wim Leers, larowlan: Add tests for SA-CORE-2020-009 [#3201393] by Lendude, dww, imalabya, dawehner, anmolgoyal74, Abhijith S: Filter glossary view by status [#3169212] by int_ua, Matroskeen, anmolgoyal74, Krzysztof Domański, alexpott, biblos, init90, xjm: Improve transliteration of Ukrainian letters [#3184650] by geek-merlin, quietone, benjifisher, alexpott: ContentEntity migration source adds revision ID as source key, incompatible with Drupal 8.8 and earlier [#3201470] by jonathanshaw, catch, longwave: EntityQuery accessCheck: Cron functions should never check access [#3192260] by danflanagan8, longwave, jhodgdon, dww: [random test failure] Random fail in media_library CKEditorIntegrationTest [#3199205] by xjm, mcdruid: Update Archive_Tar to 1.4.13 [#2857444] by nedjo, alexpott, jofitz, gaurav.kapoor, Wim Leers: Editor module fails to track usage of files embedded in non-core fields [#2969107] by raman.b, alexpott, matiasmiranda, L-four, kkalashnikov, catch, daffie, Lendude, xjm: 500 error on passing invalid month to MonthDate view argument handler Revert \"Issue #2969107 by raman.b, matiasmiranda, kkalashnikov, L-four, daffie, Lendude: 500 error on passing invalid month to MonthDate view argument handler\" [#2969107] by raman.b, matiasmiranda, kkalashnikov, L-four, daffie, Lendude: 500 error on passing invalid month to MonthDate view argument handler [#3192231] by larowlan, xjm, catch, Mixologic, kim.pepper: UnroutedUrlTest is failing on dev versions of PHP [#3054510] by greggles, Spokje, bas123, fchandler, effulgentsia, Wim Leers, mr.baileys, patchman-jelmerverkleij: Make a minor docs improvement to NormalizerBase.php in order for Patchman to see it as a newer version than it was prior to SA-CORE-2019-003 Merge 8.9.13, resolve merge conflicts, and update lockfile and dev versions.
* Fri Apr 23 2021 ecsos - Update to 8.9.14 Maintenance and security release of the Drupal 8 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement: Drupal core - Critical - Cross-site scripting - SA-CORE-2021-002
* Thu Jan 21 2021 Joop Boonen - Update to 8.9.13 - Drupal core - Critical - Third-party library - SA-CORE-2021-001
* Sat Jan 16 2021 Arjen de Korte - BuildRequires php-cli
* Thu Jan 07 2021 Joop Boonen - Update to 8.9.12 - All changes since Drupal 8.9.11 Issue #3189547 by lauriii, bnjmnm: Custom Commands indent: command not found on patches with nightwatch changes Issue #3181644 by alexpott, andypost, longwave, chr.fritsch: PCRE library version 10.35 with pcre.jit=1 makes \\Drupal\\Core\\StringTranslation\\Translator\\FileTranslation::getTranslationFilesPattern() regex misbehave Issue #3145076 by johnwebdev, alexpott, Sam152: [backport] MapItem base fields cannot be uninstalled Issue #3178845 by alexpott, Spokje, xjm, lauriii, Mixologic: [backport] Run same checks as committers do on DrupalCI Issue #3189101 by paulocs, ranjith_kumar_k_u: Update documented links from form.api.php Issue #3133386 by jyotimishra123, fgm: Incorrect error text in EntityViewBuilder constructor Issue #3188816 by mariodan, jhodgdon: Main page for api.drupal.org links in Further Information are broken Issue #3036494 by Berdir, alexpott, rgpublic, cilefen, kerasai, regilero: Race condition in ImageStyle::createDerivative() Issue #3162603 by paulocs, daffie, mxr576, vadim.jin, sandeep_jangra, naresh_bavaskar, longwave, amateescu, drunken monkey, larowlan: EntityStorageBase::loadByProperties() is broken on PostgreSQL when using two or more case insensitive properties Issue #2644468 by mondrake, DuaelFr, sanket_markan, swentel, alexpott, Lukas von Blarer, segovia94, Suresh Prabhu Parkala, shobhit_juyal, larowlan, rensingh99, Abhijith S, Haza, fietserwin, Berdir, catch, andypost: Multiple image upload breaks image dimensions Revert \"Issue #3181272 by jungle, longwave, Balu Ertl, larowlan: Fix typo in FileStorage error message\" Issue #3178066 by pameeela, TylerMarshall: Missing word in the documentation for ThirdPartySettingsInterface Issue #2916376 by rlmumford, Sweetchuck, tim.plunkett: The AATTContextDefinition annotation always kills the label and the description Issue #3181272 by jungle, longwave, Balu Ertl, larowlan: Fix typo in FileStorage error message Issue #3181870 by Matroskeen, longwave: Correct typo \"the the\" in \"core/classList\" deprecation message\" Issue #3180167 by valthebald: Remove valthebald from the Core mentoring coordinators