Panopoly 1.19 released for SA-CORE-2015-001 and SA-CONTRIB-2015-079 (and much more!)

Events happening in the community are now at Drupal community events on www.drupal.org.
dsnopek's picture

Hi Everyone!

Drupal 7.35 was released today to fix multiple moderately critical security vulnerabilities. You can learn more in the security advisory:

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2015-001

And, CTools 1.7 was also released to fix multiple moderately critical security vulnerabilities. Here is it's security vulnerability:

SA-CONTRIB-2015-079 - Chaos tool suite (ctools) - Multiple vulnerabilities

Beyond the security update, this release also includes a number of SUPER important bug fixes as well as one major feature and a couple module updates. Here are the highlights:

  • Update Panopoly Magic and Test for Issue #2443499 by dsnopek: User profile: Unable to chage image field style formatter options because they don't get saved
  • Update Panopoly Admin for Issue #2424017 by B-Prod: Malformed (and useless) string context causes errors with new versions of CTools
  • Update Panopoly Pages and Test for Issue #2293947 by caschbre, dsnopek, mglaman: Make "Landing Page" into node + Panelizer (rather than a Page Manager page)
  • Update Panopoly Magic, Core and Test for Issue #2398347 by dsnopek, mglaman: Panopoly Magic abuses FPP revisions
  • Update Panopoly Magic and Test for Issue #2317467 by dsnopek: Allow live preview to work with WYSIWYG

For more information, please see the full release notes:

https://www.drupal.org/node/2455187

Remember: you have to update the WHOLE profile - not just the individual panopoly_* modules! Otherwise, you'll be missing important module updates/patches, and it isn't guarenteed to work.

For full instructions on how to upgrade, please see the new Upgrading Panopoly guide! (We invite you to help us improve it as well.)

And, of course, you can find links to download, documentation and report problems on the Panopoly project page:

https://drupal.org/project/panopoly

Thanks!

Comments

Wrong version of panopoly_wysiwyg bundled with 1.19

dsnopek's picture

Hi Everyone!

For those of you who haven't noticed yet - the wrong version of panopoly_wysiwyg (version 1.18) got bundled with the download of Panopoly 1.19 on Drupal.org:

https://www.drupal.org/node/2455203

The downloads for distribution releases (like Panopoly) are built automatically by a packager script on Drupal.org - we just specify the versions in the drupal-org.make file (which we did correctly).

I opened an issue with the Drupal.org infrastructure team:

https://www.drupal.org/node/2455457

But unfortunately, the only way to correct the problem is to make a new Panopoly 1.20 release. :-/

However, using the Panopoly 1.19 release with the incorrect version of panopoly_wysiwyg is perfectly safe! You'll be missing a patch to fix a bug in the WYSIWYG module, but you didn't have this fix in 1.18 either, so if you didn't notice it then, you won't notice it now. :-) The only problem you'll probably notice will be an "unsupported version" message, which you can fix by manually updating panopoly_wysiwyg to version 1.19, if you'd like.

We've decided to wait until Wednesday, March 25th to make the 1.20 release, so that we aren't inundating you guys with new releases. Assuming the packager script works correctly that time, all the correct versions will be included in the download for 1.20 and this problem will be solved!

Thanks for your patience and understanding!

Panopoly

Group organizers

Group notifications

This group offers an RSS feed. Or subscribe to these personalized, sitewide feeds:

Hot content this week