evergreen:tags/rel_3_9_4

Last commit made on 2023-07-23
Get this branch:
git clone -b tags/rel_3_9_4 https://git.launchpad.net/evergreen

Branch merges

Branch information

Name:
tags/rel_3_9_4
Repository:
lp:evergreen

Recent commits

c101370... by Jason Stephenson

Add missing 3.9.4 release notes entries

Signed-off-by: Jason Stephenson <email address hidden>

8f8a6d8... by Jason Stephenson

Bumping version numbers, adding Upgrade Script and Changelog

Signed-off-by: Jason Stephenson <email address hidden>

504c354... by Jason Stephenson

Bumping Perl version strig for 3.9.4

Signed-off-by: Jason Stephenson <email address hidden>

4ecdd88... by Jason Stephenson

Translation updates - xtb files

Signed-off-by: Jason Stephenson <email address hidden>

f2cba49... by Jason Stephenson

Translation updates - po files

Signed-off-by: Jason Stephenson <email address hidden>

0f7f620... by Jason Stephenson

Translation updates - newpot

Signed-off-by: Jason Stephenson <email address hidden>

e3cf131... by Jason Stephenson

Add upgrade note to the 3.9.4 release notes

Mention that Test::MockModule is requireed to run the automated
tests and that the prerequisites should be reinstalled for the
user's distribution if they wish to run the tests.

Signed-off-by: Jason Stephenson <email address hidden>

08415af... by Jason Stephenson

Fix installation of Test::MockModule

Installation of the Test::MockModule Perl module was broken in all
but the Debian Buster prerequisite install Makefiles. This commit
fixes the package names so that the prerequisite installation can
proceed.

Signed-off-by: Jason Stephenson <email address hidden>

0433a52... by Jason Stephenson

Update 3.9.4 release notes for security release

Signed-off-by: Jason Stephenson <email address hidden>

76d16c5... by Galen Charlton <email address hidden>

LP#2023222: prevent open-ils.fielder.$IDLCLASS from invoking function transforms

This patch adds some argument checking to the family of
open-ils.fielder.$IDLCLASS[.atomic] methods to prevent
JSON query funcion transforms from being invoked. This
is needed to prevent unauthenticated callers from invoking
arbitrary stored procedures.

This is a security patch that closes down a pathway
towards remote, unauthenticated SQL injection attacks.

Signed-off-by: Galen Charlton <email address hidden>
Signed-off-by: Jason Stephenson <email address hidden>
Signed-off-by: Galen Charlton <email address hidden>