Author: Joe Sheridan Fenn

An update was released to our development environment on Thursday, September 7th, 2017. Barring any security releases, these updates will be pushed to our production environment on Thursday, September 14th. The following updates will be applied:

Major Version Upgrade

• None

Drupal Core Bug Fix/Security Updates

• None

New Modules Added

• Book Title Override  7.x-1.2
  • Provides the ability to override a book page’s title in the corresponding book navigation. Please see our instructions to learn how to do this.

Contributed Module Updates

• CAPTCHA 7.x-1.5
  • Fixed moderately critical security issue where session ID storage method could have led to a Denial of Service attack. This vulnerability was mitigated by the fact that Drupal does not give a session to all visitors, especially when used with advanced caching systems like Varnish.
• Media  7.x-2.11
  • Media inline filter: Delegated “float” to outer element
  • Changed file_entity requirements in Media to allow dev releases including new file_entity 3.x
  • Now uses selected editor text as media file link text
  • Fixed javascript error that appears after media upload “Cannot read property “selectedMedia” of undefined
• Views 7.x-3.18
  • More than ten bug fixes/improvements. Please refer to project’s release notes.
• Webform Views Select 7.x-1.0-rc2
  • Fixes a critical bug that arises when allowing some HTML tags and some Coder (code style) issues.

OSU Module Updates

• None

OSU Theme Updates

• None

If you have questions or concerns please contact us though our contact form.

An update will be released to our production environment on Thursday, June 29th, 2017. The following updates will be applied:

Major Version Upgrade

• None

Drupal Core Bug Fix/Security Updates

• Drupal Core 7.56
  • Fixes multiple critical vulnerabilities. Please see project release notes for details.
• Site Verification 7.x-1.2
  • Fixes Moderately Critical – Cross Site Scripting – SA-CONTRIB-2017-051

New Modules Added

• None

Contributed Module Updates

Please note that this is a very big and complicated update that has spent over a month in the development environment and is now being pushed to production. We normally don’t send out announcements for production releases, but given the size and scope of this update, in addition to the fact that there were additional updates that were committed while this release was in development, we felt some explanations were in order.

We’ve spent a couple of months now testing the update package ourselves, on our local machines, on many different sample sites in a separate cloud-based testing environment, and then in the development environment, where we received some valuable feedback from all of you. As a result of your feedback, we were able to catch a few more issues and actually add in some additional improvements along the way. These improvements include:

• CKEditor now displays the selected theme’s styling inside of the rich text editor as contributors are creating their content
• Users are now able to add a link to an embedded image from the Media Browser as they’re embedding the image, initially
• Bulk uploads are now possible via the Media Browser into an image fields – the process isn’t entirely perfected yet, but it is working and is pretty reliable

These updates weren’t without some pains. There are two notable issues:

• Image Properties are no longer available via right clicking on an image – you’ll now see a “Media settings” option which will allow you to change your media settings
• If you have changed the Image Properties on an embedded image prior to this update, the image will continue to show, however right clicking on the image will result in a 404 error. The only fix for this, at this time, is to re-embed the image. Given the fact that once images are embedded, users rarely will go back to change their properties, we figured we were were safe to push this out as-is while we investigate ways to address the situation.

If you find any issues other than the ones above please let us know via our contact form.

• CKEditor 7.x-1.18
  • More than 10 fixes/improvements. Please see project release notes for details.
• Entity Reference 7.x-1.4
  • Fixed failing update for MSSQL and PostgreSQL
• File Entity 7.x-2.0-beta3
  • More than 10 items addressed. Please see project’s release notes for details.
• IMCE 7.x-1.11
  • Permits IMCE to use the Administration theme. Adds port number in furl from File Manager.
• Media  7.x-2.3
  • Please note that we have went from Media 7.x-2.0-beta1, up through 26 beta and rc versions and 7.x-2.1. While it may not be evident through the UI, there have been many changes to the code. For a full list of all changes done in Media for Drupal 7, please see https://www.drupal.org/project/media/releases?api_version%5B%5D=103.
• Media CKEditor 7.x-2.1
  • Syntax error fixed
  • Fully rendered file in WYSIWYG, including overridden fields
  • Fixed multiple media link breakage
  • Added insert button to media widget
  • Updated the graphic for the media button
• Media: YouTube 7.x-3.4 – Multiple changes over several updates
  • Tested as compatible with the latest media and file_entity releases
  • Fixed issue with the simpletests related to changes made in issue #2879430 olstjos
  • Disable related videos by default
  • Bug fix for when no cookie option is not set. Use https for external source of youtube when no cookie option is not set
  • Fixed testability of MediaInernetYoutTubeHandler method
• Module Filter 7.x-2.1
  • More than 10 fixes/improvements. Please see project release notes for details.
• Multiple Forms 7.x-1.3
  • Elements with name property set in attributes adjusted for multiforms (was missing values on submit)
  • Preserve theme-wrappers on forms
  • Fixed Simpletest
  • Enabled automatic testing on 7.x-1.x branch and commit
• Services
  • Security Vulnerability fix.
  • Update the README for spyc location
  • Add drush make file to download spyc dependency
  • Services REST: Response code 401 Unauthorized for missing arguments should be 400 Bad Request
• WYSIWYG 7.x-2.4
  • More than 50 fixes/improvements, split between a couple of update versions. Please see project release notes on 2.3 and 2.4 for details.
  • This module is only required for those sites that are still using TinyMCE. In the upcoming weeks, Web Services will be working with clients to switch their text editors from TinyMCE to CKEditor. We’ll have a more detailed plan released later this week.

OSU Module Updates

• Install Profile 7.x-1.7.2
  • To include change made to OSU Editor module
• OSU Editor:
  
  • Updates to align with the media/ckeditor updates

OSU Theme Updates

• OSU Pine
  • The following Bootstrap components have been branded and now meet accessibility standards (thanks Michael McDonald)
    • Buttons
    • Various Table Elements
    • Labels
    • Badges
    • Thumbnails
    • Alerts
    • Wells
    • For more information on Bootstrap components and how to use them, check out http://getbootstrap.com/2.3.2/components.html or come to Open Lab.

If you have questions or concerns please contact us though our contact form.

An update was released to our development environment on Wednesday, May 17th, 2017. It will be released to production sites on Thursday, June 1st, barring any security/emergency updates. The following updates will be applied:

Major Version Upgrade

• None

Drupal Core Bug Fix/Security Updates

• None

New Modules Added

• None

Contributed Module Updates

Please note that this is a very big and complicated update.

We’ve spent several weeks testing the update package ourselves, on many different sample sites in a separate environment. Now we need the community’s help to find anything that we may have missed while this update is sitting in dev. Please, experiment on your dev sites with adding media into your text editor using the Media browser. Examine the rich text editor and let us know if any images are missing that should be there. In particular, open up a node that has an image embedded in the rich text editor, make a minor change, and then save the node – the embedded image should remain. If it doesn’t, let us know.

We’ve also made a few improvements that we hope you like. The most noticeable is the fact that, now, CKEditor displays the selected theme’s styling inside of the rich text editor as contributors are creating their content.

If you find any issues, or if you want to sing our praises, please let us know via our contact form.

• CKEditor 7.x-1.17
  • More than 10 fixes/improvements. Please see project release notes for details.
• Media  7.x-2.3
  • Please note that we have went from Media 7.x-2.0-beta1, up through 26 beta and rc versions and 7.x-2.1. While it may not be evident through the UI, there have been many changes to the code. For a full list of all changes done in Media for Drupal 7, please see https://www.drupal.org/project/media/releases?api_version%5B%5D=103.
• Multiple Forms 7.x-1.3
  • Elements with name property set in attributes adjusted for multiforms (was missing values on submit)
  • Preserve theme-wrappers on forms
  • Fixed Simpletest
  • Enabled automatic testing on 7.x-1.x branch and commit
• File Entity 7.x-2.0-beta3
  • More than 10 items addressed. Please see project’s release notes for details.
• WYSIWYG 7.x-2.4
  • More than 50 fixes/improvements, split between a couple of update versions. Please see project release notes on 2.3 and 2.4 for details.
  • This module is only required for those sites that are still using TinyMCE. In the upcoming weeks, Web Services will be working with clients to switch their text editors from TinyMCE to CKEditor. We’ll have a more detailed plan released later this week.

OSU Module Updates

• OSU Editor:
  
  • Updates to align with the media/ckeditor updates.

OSU Theme Updates

• OSU Pine
  • The following Bootstrap components have been branded and now meet accessibility standards (thanks Michael McDonald)
    • Buttons
    • Various Table Elements
    • Labels
    • Badges
    • Thumbnails
    • Alerts
    • Wells
    • For more information on Bootstrap components and how to use them, check out http://getbootstrap.com/2.3.2/components.html or come to Open Lab.

If you have questions or concerns please contact us though our contact form.

An update was released to our development environment on Wednesday, April 19th, 2017. It will be released to production sites on Wednesday, April 26th, barring any security/emergency updates. The following updates will be applied:

Major Version Upgrade

• None

Drupal Core Bug Fix/Security Updates

• None

New Modules Added

• None

Contributed Module Updates

• Colorbox 7.x-2.13
  
  • Bug fixes:
    • Fixed $field[‘bundles’] which returned empty for files
  • Misc:
    • Fixed coding standards for the 7.x-2.x branch
    • Added the setting for returnFocus
    • Fixed typo where “javascript” should be “JavaScript”
    • Propagated alt and title text to colorbox
    • Error checked truck command to see if the destination is writable
      
• Date  7.x-2.10
  • More than 10 items addressed. Please see project’s release notes for details.
• References 7.x-2.2
  • Fixes References – Critical – Unsupported – SA-CONTRIB-2017-38
  • Added UUID/Deploy support locally in the References project.
  • Fixed message ‘is not a valid node id for this field.
  • Fixed Validation callbacks that can result in an unneed db query due to a cache miss.
  • Fixed Nids that were needlessly added to a dynamic query when user has certain permissions.
  • Fixed title mismatch. Please check your selection (Error text should be more helpfull).
  • Added New search method for autocomplete.
    
• Views 7.x-3.16
  • More than 10 items addressed. Please see project’s release notes for details.
• Webform 7.x-4.15
  • More than 10 items addressed. Please see project’s release notes for details.

OSU Module Updates

• None

OSU Theme Updates

• None

If you have questions or concerns please contact us though our contact form.

An update was released to our development environment on Tuesday, March 21st, 2017. It will be released to production sites on Tuesday, March 28th, barring any security/emergency updates. The following updates will be applied:

Major Version Upgrade

• None

Drupal Core Bug Fix/Security Updates

• None

New Modules Added

• None

Contributed Module Updates

• Memcache API Integration 7.x-1.5
  • More than 10 updates, please refer to project release notes.

OSU Module Updates

• None

OSU Theme Updates

• None

If you have questions or concerns please contact us though our contact form.

An update will be released to our development environment on Monday, February 6th, 2017. It will be released to production sites on Tuesday, February 7th, barring any security/emergency updates. The following updates will be applied:

Major Version Upgrade

• None

Drupal Core Bug Fix/Security Updates

• None

New Modules Added

• None

Contributed Module Updates

• Better Exposed Filters 7.x-3.4
  • Fixes XSS vulnerability when using the “Include term description” option with exposed taxonomy filters. See security release https://www.drupal.org/node/2848865 (mitgated by the fact that an attacker must have a role with the permission “administer taxonomy”.

OSU Module Updates

• None

OSU Theme Updates

• None

If you have questions or concerns please contact us though our contact form.

An update will be released to our development environment on Thursday, January 19th, 2017. It will be released to production sites on Tuesday, January 24th, barring any security/emergency updates. The following updates will be applied:

Major Version Upgrade

• None

Drupal Core Bug Fix/Security Updates

• None

New Modules Added

• Adminimal Admin Menu 7.x-1.7 – Provides nicer administration menu

Contributed Module Updates

• Better Exposed Filters 7.x-3.3
  • Autosubmit on an element-by-element basis
  • Better test coverage
  • Corrects functionality of single on/off checkbox filters
  • Configurable collapsed state of secondary filters
  • Refactors bef_checkbox into a theme function
  • Lots of bug fixes
• Entity Reference 7.x-1.2
  • More than 10 bug fixes/feature additions. Please see project release notes for further details.
• Field Collection 7.x-1.0-beta12
  • More than 10 bug fixes/feature additions. Please see project release notes for further details.
• Metatag 7.x-1.20
  • Brings back compatibility with Workbench Moderation v1 module (this does not affect us as we don’t use Workbench Moderation).
  • Fixed sandbox-based update scripts so they don’t run into infinite loops.

OSU Module Updates

• None

OSU Theme Updates

• None

If you have questions or concerns please contact us though our contact form.