Hello,
This is a notification of a new release for the 1.9.2 versions. I am
translating this email from the French version sent by the developers.
In the preparation of the next major version, 1.9.3, an *important
security hole* has been found that will affect all previous version of
SPIP. The version 1.9.2c corrects this bug and it is strongly
recommended to update to that version all production sites as soon as
possible.
You can download the new version from the usual web site:
http://www.spip.net/en_download
Version 1.9.2c also provides some bug fixes and improvements:
* Bug fixes :
o database restore : recovery from timeout et connexion loss,
o Internal messaging system : fix for the notification email
of discussion follow ups,
o date of earlier publishing : fix for a bug in Internet
Explorer blocking its modification,
o section menu (in the all site page) : fix of incomplete
section tree in some cases,
o author information : fix bug in the web site's URL modification,
o image filters : fix bug on gif's flattening,
o fix a bug on the typographical bar,
o #URL_LOGOUT : corrects & and redirection to the
current page (self),
o #LOGIN_PUBLIC : allows visitors.
* Improvements :
o support JQuery 1.1.4 (the version provided with SPIP is
still the 1.1.1) and other related bug fixes,
o Filter image_aplatir : new third parameter "quality" (85
by default for jpg, number of palette colours for gif et png),
o passwords now accepts ' and \,
o articles_tous and browser : query optimisations (override
MySQL or big sites),
o new supported file types: csv, mkv, mka, kml et kmz.
1.9.2c becomes the new official stable version of SPIP and as said
before everyone should upgrade to this one.
For user's of the old 1.8.x branches, a maintenance version can be found at:
http://www.spip.net/spip-dev/DISTRIB/SPIP-v1-8-3a.zip
If you are following the 1.9.3 development branch, you should already
have fetch the fixes in the updates from commit 10221.
Here is a list of the modified files from version 1.9.2b:
/dist/backend.html
/dist/backend-breves.html
/dist/forum.html
/dist/style_prive_defaut.html
/dist/javascript/layer.js
/dist/vignettes/mkv.png
/dist/vignettes/mka.png
/dist/vignettes/kml.png
/dist/vignettes/kmz.png
/ecrire/inc_version.php
/ecrire/action/editer_auteur.php
/ecrire/action/editer_site.php
/ecrire/action/poster_forum_prive.php
/ecrire/balise/login_public.php
/ecrire/balise/url_logout.php
/ecrire/base/typedoc.php
/ecrire/base/upgrade.php
/ecrire/exec/articles_tous.php
/ecrire/exec/brouteur_frame.php
/ecrire/exec/menu_rubriques.php
/ecrire/inc/auth.php
/ecrire/inc/barre.php
/ecrire/inc/dater.php
/ecrire/inc/filtres.php
/ecrire/inc/filtres_images.php
/ecrire/inc/import.php
/ecrire/inc/modifier.php
/ecrire/inc/presentation.php
/ecrire/inc/selectionner_auteur.php
/ecrire/inc/texte.php
/ecrire/install/etape_4.php
/ecrire/public/composer.php
from 1.8.3 to 1.8.3a :
/inc-calcul-outil.php3
/ecrire/inc-version.php3
(translated from: Stephane's orginal notification:
http://article.gmane.org/gmane.comp.web.spip.devel/43417)
Pierre