turnkey-drupal8-16.2 (1) turnkey; urgency=low * Update Drupal8 to latest upstream version - 8.9.18. * Ensure that it's actually installing Drupal v8! Closes #1626. -- Jeremy Davis Wed, 25 Aug 2021 10:05:51 +1000 turnkey-drupal8-16.1 (1) turnkey; urgency=low * Update Drupal8 to latest upstream version - 8.9.13. Resolves a number of security related issues. * Update Drush to latest - 10.3.6. * Include 'turnkey-composer' wrapper script - runs composer as www-data user. Makes it easy to not run composer as root - part of #1539. * Also include 'turnkey-drush' and 'turnkey-drupal' wrapper scripts. * Explicitly install composer via Makefile (rather than automatically include in all LAMP based appliances) - part of #1563. * Note: Please refer to turnkey-core's 16.1 changelog for changes common to all appliances. Here we only describe changes specific to this appliance. -- Jeremy Davis Thu, 11 Feb 2021 14:58:34 +1100 turnkey-drupal8-16.0 (1) turnkey; urgency=low * Update Drupal8 to latest upstream version - 8.8.5. Now using drupal/recommended-project (v15.x used drupal-composer/drupal-project). * Update Drush to v10.2 (now explicitly installed via Composer) * Remove entity-updates - closes #1399. * Added Drupal Console - closes #1268. * Bump PHP CLI memory usage to 768MB. Note that for problem free usage of Composer, Drush &/or Drupal console, setting to 2048MB+ (2GB+) may be required! * Update readme to note inclusion of Drupal Console with links to upstream website. * Explicitly disable TLS<1.2 (i.e. SSLv3, TLSv1, TLSv1.1). (v15.x TurnKey releases supported TLS 1.2, but could fallback as low as TLSv1). * Update SSL/TLS ciphers to provide "Intermediate" browser/client support (suitable for "General-purpose servers with a variety of clients, recommended for almost all systems"). As provided by Mozilla via https://ssl-config.mozilla.org/. * Updated all relevant Debian packages to Buster/10 versions; including PHP 7.3. * Updated version of mysqltuner script - now installed as per upstream recommendation. * Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. -- Jeremy Davis Fri, 24 Apr 2020 08:05:17 +1000 turnkey-drupal8-15.6 (1) turnkey; urgency=low * Update Drupal8 to latest upstream version - 8.7.1. Resolves: - SA-CORE-2019-006 - Moderately critical security issue(s). - SA-CORE-2019-007 - Moderately critical security issue(s). * Fix broken cron job - closes #1317. [ Stefan Davis ] * Include additional php packages (uploadprogress and mbstring) to improve user experience. * Update readme to include notes regarding composer update; plus new links to docs. -- Jeremy Davis Mon, 13 May 2019 16:24:19 +1000 turnkey-drupal8-15.5 (1) turnkey; urgency=low * Update Drupal8 to latest upstream version - 8.6.13. Resolves security issues raised via SA-CORE-2019-003 plus others. -- Jeremy Davis Thu, 21 Mar 2019 16:39:57 +1100 turnkey-drupal8-15.4 (1) turnkey; urgency=low * Update Drupal8 to latest upstream version - 8.6.7. -- Jeremy Davis Tue, 22 Jan 2019 16:34:50 +1100 turnkey-drupal8-15.3 (1) turnkey; urgency=low * Includes latest upstream Drupal8 - v8.6.3. * Fix escaping for inithook inputs to support complex passwords - closes #1247 [ Stefan Davis ] * Rebuild to resolve inadvertent removal of mariadb during sec-updates - part of #1246. -- Jeremy Davis Wed, 21 Nov 2018 18:09:47 +1100 turnkey-drupal8-15.2 (1) turnkey; urgency=low * Rebuilt to include Drupal 8.6.2 due to security issue(s) described in SA-CORE-2018-006 - https://www.drupal.org/sa-core-2018-006 -- Jeremy Davis Thu, 18 Oct 2018 10:37:44 +1100 turnkey-drupal8-15.1 (1) turnkey; urgency=low * Rebuilt to include Drupal 8.5.6 due to security issue. See https://www.turnkeylinux.org/blog/drupal8-and-symfony-cve-2018-14773 -- Jeremy Davis Thu, 09 Aug 2018 18:12:42 +1000 turnkey-drupal8-15.0 (1) turnkey; urgency=low * Updated Drupal8 to latest stable upstream * Updated Drush to latest upstream * Install Adminer directly from stretch/main repo * Provide "adminer" root-like user for Adminer MySQL access * Replace MySQL with MariaDB (drop-in MySQL replacement) * Updated version of mysqltuner script * Includes PHP7.0 (installed from Debian repos) * Updated PHP default settings * Remove phpsh (no longer maintained) * Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. -- Vlad Kuzmenko Mon, 03 Jul 2018 06:03:42 +0200 turnkey-drupal8-14.2 (1) turnkey; urgency=low * Updated Drupal8 to latest stable upstream (v8.3.1 - via drush). * Updated Drush to latest upstream (v8.1.12-dev). * Updated Adminer to 4.2.5 * Installed security updates. * Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. -- Jeremy Davis Wed, 19 Apr 2017 15:45:21 +1000 turnkey-drupal8-14.1 (1) turnkey; urgency=low * Drupal8: - Latest stable version of Drush v8.0.x (installed via composer at build time). - Latest version of Drupal 8 installed via Drush. - Fixed cron (closes #559). - Removed php5-xcache (#untracked-bug). - Added inithook to set "Trusted Host" (closes #451). - Changed included modules as per recommendation of Mike Stiv (drupal ninja). - Latest versions of modules & dependencies installed (& some enabled). - Removed superfluous dependencies & added Twig C extension (performance). - Significant work contributed by Dashamir Hoxha (@dashohoxha). * Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. -- Jeremy Davis Mon, 08 Feb 2016 10:59:31 +1100 turnkey-drupal8-14.0 (1) turnkey; urgency=low * Drupal8: - Forked from Drupal7 appliance - Latest dev version of Drush is now installed via composer at build time. - Latest version of Drupal8 is installed via Drush. - Latest versions of modules are now installed via Drush. * Replaced phpMyAdmin with Adminer * Hardened default SSL settings * Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. -- Jeremy Davis Fri, 03 Jul 2015 11:21:28 +1000 turnkey-drupal7-13.0 (1) turnkey; urgency=low * Drupal7: - Latest version of Drush is now installed via pear at build time. - Latest version of Drupal7 is now installed via Drush. - Latest versions of modules are now installed via Drush. * phpMyAdmin: - Configured to allow users preferences stored in database. - Specified blowfish_secret and regeneration on firstboot (security). * Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. -- Alon Swartz Thu, 10 Oct 2013 17:45:58 +0300 turnkey-drupal7-12.1 (1) turnkey; urgency=low * Drupal7: - Latest version of Drush is now installed via pear at build time. - Latest version of Drupal7 is now installed via Drush. - Latest versions of modules are now installed via Drush. - Fixed support for complex passwords in inithook (LP#1102662). - Increased php cli memory limit for Drush (LP#1048443). * Added phpsh (interactive shell for PHP) and php5-cli (generically useful). * Upstream source component versions: ckeditor 4.0.2 * Replaced phpMyAdmin with Adminer * Hardened default SSL settings * Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. -- Alon Swartz Sun, 07 Apr 2013 08:00:00 +0200 turnkey-drupal7-12.0 (1) turnkey; urgency=low * Initial public release of TurnKey Drupal7, based on TKLPatch submitted by John Carver. * Installed from upstream tarball, includes support for inline upgrades. * Set Drupal admin email and password on firstboot (convenience, security). * Regenerates all secrets during installation / firstboot (security). * Includes drush for command line administration and configuration. * Replaced Drupal's poor-man-cron with drush cron. * Includes many useful/popular drupal7 modules: - devel - views - panels - rules - pathauto - google_analytics - backup_migrate - recaptcha - imageapi - lightbox2 - getid3 - imce - ckeditor - jquery_ui - transliteration - tagadelic - advanced_help - admin_menu - ctools - globalredirect - logintoboggan - simpletest - fivestart - token - webform - email - link - date * MySQL related: - Set MySQL root password on firstboot (convenience, security). - Force MySQL to use Unicode/UTF8. - Includes PhpMyAdmin (listening on port 12322 - uses SSL). * SSL support out of the box. * Includes php-xcache PHP opcode cacher / optimizer (performance). * Includes postfix MTA (bound to localhost) for sending of email (e.g. password recovery). Also includes webmin postfix module for convenience. * Major component versions drupal 7.14 (upstream archive) drush 7.x-5.1 (upstream archive) apache2 2.2.16-6+squeeze7 mysql-server 5.1.63-0+squeeze1 phpmyadmin 4:3.3.7-7 * Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance. -- Alon Swartz Wed, 01 Aug 2012 08:00:00 +0200