civicrm release-5.49.4

civicrm/ext/oauth-client/info.xml

@@ -15,7 +15,7 @@
     <url desc="Licensing">http://www.gnu.org/licenses/agpl-3.0.html</url>
   </urls>
   <releaseDate>2020-10-23</releaseDate>
-  <version>5.49.3</version>
+  <version>5.49.4</version>
   <develStage>stable</develStage>
   <compatibility>
     <ver>5.38</ver>

civicrm/ext/payflowpro/info.xml

@@ -15,7 +15,7 @@
     <url desc="Licensing">http://www.gnu.org/licenses/agpl-3.0.html</url>
   </urls>
   <releaseDate>2021-04-13</releaseDate>
-  <version>5.49.3</version>
+  <version>5.49.4</version>
   <develStage>stable</develStage>
   <compatibility>
     <ver>5.0</ver>

civicrm/ext/recaptcha/info.xml

@@ -13,7 +13,7 @@
     <url desc="Licensing">http://www.gnu.org/licenses/agpl-3.0.html</url>
   </urls>
   <releaseDate>2021-04-03</releaseDate>
-  <version>5.49.3</version>
+  <version>5.49.4</version>
   <tags>
     <tag>mgmt:hidden</tag>
   </tags>

civicrm/ext/search_kit/info.xml

@@ -15,7 +15,7 @@
     <url desc="Licensing">http://www.gnu.org/licenses/agpl-3.0.html</url>
   </urls>
   <releaseDate>2021-01-06</releaseDate>
-  <version>5.49.3</version>
+  <version>5.49.4</version>
   <develStage>stable</develStage>
   <compatibility>
     <ver>5.38</ver>

civicrm/ext/sequentialcreditnotes/info.xml

@@ -15,7 +15,7 @@
     <url desc="Licensing">http://www.gnu.org/licenses/agpl-3.0.html</url>
   </urls>
   <releaseDate>2020-01-28</releaseDate>
-  <version>5.49.3</version>
+  <version>5.49.4</version>
   <tags>
     <tag>mgmt:hidden</tag>
   </tags>

civicrm/release-notes.md

@@ -15,6 +15,16 @@ Other resources for identifying changes are:
     * https://github.com/civicrm/civicrm-joomla
     * https://github.com/civicrm/civicrm-wordpress
 
+## CiviCRM 5.49.4
+
+Released June 1, 2022
+
+- **[Synopsis](release-notes/5.49.4.md#synopsis)**
+- **[Security advisories](release-notes/5.49.4.md#security)**
+- **[Bugs resolved](release-notes/5.49.4.md#bugs)**
+- **[Credits](release-notes/5.49.4.md#credits)**
+- **[Feedback](release-notes/5.49.4.md#feedback)**
+
 ## CiviCRM 5.49.3
 
 Released May 25, 2022

civicrm/release-notes/5.49.4.md

+# CiviCRM 5.49.4
+
+Released June 1, 2022
+
+- **[Synopsis](#synopsis)**
+- **[Bugs resolved](#bugs)**
+- **[Credits](#credits)**
+- **[Feedback](#feedback)**
+
+## <a name="synopsis"></a>Synopsis
+
+| *Does this version...?*                                         |          |
+| --------------------------------------------------------------- | -------- |
+| Change the database schema?                                     | no       |
+| Alter the API?                                                  | no       |
+| Require attention to configuration options?                     | no       |
+| Fix problems installing or upgrading to a previous version?     | no       |
+| Introduce features?                                             | no       |
+| **Fix bugs?**                                                   | **yes**  |
+
+## <a name="security"></a>Security advisories
+
+- **[CIVI-SA-2022-07](https://civicrm.org/advisory/civi-sa-2022-07-apiv3-access-bypass)**: APIv3 Access Bypass
+
+## <a name="bugs"></a>Bugs resolved
+
+* **_Recent Items_: Fix "Authorization failed" error on checksum requests  ([#23607](https://github.com/civicrm/civicrm-core/pull/23607))**
+
+  This issue causes a fatal error on some configurations (such as public-facing `webform`s that rely on checksums),
+  even if the screen does not display "Recent Items".
+
+## <a name="credits"></a>Credits
+
+This release was developed by the following authors and reviewers:
+
+Wikimedia Foundation - Eileen McNaughton; MJW Consulting - Matthew Wire; JMA Consulting -
+Seamus Lee; CiviCRM - Tim Otten, Coleman Watts; Artful Robot - Rich Lott
+
+## <a name="feedback"></a>Feedback
+
+These release notes are edited by Tim Otten and Andie Hunt.  If you'd like to
+provide feedback on them, please login to https://chat.civicrm.org/civicrm and
+contact `@agh1`.

civicrm/sql/civicrm_data.mysql

@@ -23787,4 +23787,4 @@ INSERT INTO `civicrm_report_instance`
     ( `domain_id`, `title`, `report_id`, `description`, `permission`, `form_values`)
 VALUES
     (  @domainID, 'Survey Details', 'survey/detail', 'Detailed report for canvassing, phone-banking, walk lists or other surveys.', 'access CiviReport', 'a:39:{s:6:"fields";a:2:{s:9:"sort_name";s:1:"1";s:6:"result";s:1:"1";}s:22:"assignee_contact_id_op";s:2:"eq";s:25:"assignee_contact_id_value";s:0:"";s:12:"sort_name_op";s:3:"has";s:15:"sort_name_value";s:0:"";s:17:"street_number_min";s:0:"";s:17:"street_number_max";s:0:"";s:16:"street_number_op";s:3:"lte";s:19:"street_number_value";s:0:"";s:14:"street_name_op";s:3:"has";s:17:"street_name_value";s:0:"";s:15:"postal_code_min";s:0:"";s:15:"postal_code_max";s:0:"";s:14:"postal_code_op";s:3:"lte";s:17:"postal_code_value";s:0:"";s:7:"city_op";s:3:"has";s:10:"city_value";s:0:"";s:20:"state_province_id_op";s:2:"in";s:23:"state_province_id_value";a:0:{}s:13:"country_id_op";s:2:"in";s:16:"country_id_value";a:0:{}s:12:"survey_id_op";s:2:"in";s:15:"survey_id_value";a:0:{}s:12:"status_id_op";s:2:"eq";s:15:"status_id_value";s:1:"1";s:11:"custom_1_op";s:2:"in";s:14:"custom_1_value";a:0:{}s:11:"custom_2_op";s:2:"in";s:14:"custom_2_value";a:0:{}s:17:"custom_3_relative";s:1:"0";s:13:"custom_3_from";s:0:"";s:11:"custom_3_to";s:0:"";s:11:"description";s:75:"Detailed report for canvassing, phone-banking, walk lists or other surveys.";s:13:"email_subject";s:0:"";s:8:"email_to";s:0:"";s:8:"email_cc";s:0:"";s:10:"permission";s:17:"access CiviReport";s:6:"groups";s:0:"";s:9:"domain_id";i:1;}');
-UPDATE civicrm_domain SET version = '5.49.3';
+UPDATE civicrm_domain SET version = '5.49.4';

civicrm/sql/civicrm_generated.mysql

@@ -2933,7 +2933,7 @@ UNLOCK TABLES;
 LOCK TABLES `civicrm_domain` WRITE;
 /*!40000 ALTER TABLE `civicrm_domain` DISABLE KEYS */;
 INSERT INTO `civicrm_domain` (`id`, `name`, `description`, `version`, `contact_id`, `locales`, `locale_custom_strings`) VALUES
- (1,'Default Domain Name',NULL,'5.49.3',1,NULL,'a:1:{s:5:\"en_US\";a:0:{}}');
+ (1,'Default Domain Name',NULL,'5.49.4',1,NULL,'a:1:{s:5:\"en_US\";a:0:{}}');
 /*!40000 ALTER TABLE `civicrm_domain` ENABLE KEYS */;
 UNLOCK TABLES;

civicrm/vendor/autoload.php

@@ -4,4 +4,4 @@
 
 require_once __DIR__ . '/composer/autoload_real.php';
 
-return ComposerAutoloaderInit3f573d51b149865ef06c242906550fc1::getLoader();
+return ComposerAutoloaderInit0b7d21bead845f78d61233f501552e74::getLoader();

civicrm/vendor/composer/autoload_real.php

@@ -2,7 +2,7 @@
 
 // autoload_real.php @generated by Composer
 
-class ComposerAutoloaderInit3f573d51b149865ef06c242906550fc1
+class ComposerAutoloaderInit0b7d21bead845f78d61233f501552e74
 {
     private static $loader;
 
@@ -19,9 +19,9 @@ class ComposerAutoloaderInit3f573d51b149865ef06c242906550fc1
             return self::$loader;
         }
 
-        spl_autoload_register(array('ComposerAutoloaderInit3f573d51b149865ef06c242906550fc1', 'loadClassLoader'), true, true);
+        spl_autoload_register(array('ComposerAutoloaderInit0b7d21bead845f78d61233f501552e74', 'loadClassLoader'), true, true);
         self::$loader = $loader = new \Composer\Autoload\ClassLoader();
-        spl_autoload_unregister(array('ComposerAutoloaderInit3f573d51b149865ef06c242906550fc1', 'loadClassLoader'));
+        spl_autoload_unregister(array('ComposerAutoloaderInit0b7d21bead845f78d61233f501552e74', 'loadClassLoader'));
 
         $includePaths = require __DIR__ . '/include_paths.php';
         $includePaths[] = get_include_path();
@@ -31,7 +31,7 @@ class ComposerAutoloaderInit3f573d51b149865ef06c242906550fc1
         if ($useStaticLoader) {
             require_once __DIR__ . '/autoload_static.php';
 
-            call_user_func(\Composer\Autoload\ComposerStaticInit3f573d51b149865ef06c242906550fc1::getInitializer($loader));
+            call_user_func(\Composer\Autoload\ComposerStaticInit0b7d21bead845f78d61233f501552e74::getInitializer($loader));
         } else {
             $map = require __DIR__ . '/autoload_namespaces.php';
             foreach ($map as $namespace => $path) {
@@ -52,19 +52,19 @@ class ComposerAutoloaderInit3f573d51b149865ef06c242906550fc1
         $loader->register(true);
 
         if ($useStaticLoader) {
-            $includeFiles = Composer\Autoload\ComposerStaticInit3f573d51b149865ef06c242906550fc1::$files;
+            $includeFiles = Composer\Autoload\ComposerStaticInit0b7d21bead845f78d61233f501552e74::$files;
         } else {
             $includeFiles = require __DIR__ . '/autoload_files.php';
         }
         foreach ($includeFiles as $fileIdentifier => $file) {
-            composerRequire3f573d51b149865ef06c242906550fc1($fileIdentifier, $file);
+            composerRequire0b7d21bead845f78d61233f501552e74($fileIdentifier, $file);
         }
 
         return $loader;
     }
 }
 
-function composerRequire3f573d51b149865ef06c242906550fc1($fileIdentifier, $file)
+function composerRequire0b7d21bead845f78d61233f501552e74($fileIdentifier, $file)
 {
     if (empty($GLOBALS['__composer_autoload_files'][$fileIdentifier])) {
         require $file;

civicrm/vendor/composer/autoload_static.php

@@ -4,7 +4,7 @@
 
 namespace Composer\Autoload;
 
-class ComposerStaticInit3f573d51b149865ef06c242906550fc1
+class ComposerStaticInit0b7d21bead845f78d61233f501552e74
 {
     public static $files = array (
         '320cde22f66dd4f5d3fd621d3e88b98f' => __DIR__ . '/..' . '/symfony/polyfill-ctype/bootstrap.php',
@@ -684,11 +684,11 @@ class ComposerStaticInit3f573d51b149865ef06c242906550fc1
     public static function getInitializer(ClassLoader $loader)
     {
         return \Closure::bind(function () use ($loader) {
-            $loader->prefixLengthsPsr4 = ComposerStaticInit3f573d51b149865ef06c242906550fc1::$prefixLengthsPsr4;
-            $loader->prefixDirsPsr4 = ComposerStaticInit3f573d51b149865ef06c242906550fc1::$prefixDirsPsr4;
-            $loader->prefixesPsr0 = ComposerStaticInit3f573d51b149865ef06c242906550fc1::$prefixesPsr0;
-            $loader->fallbackDirsPsr0 = ComposerStaticInit3f573d51b149865ef06c242906550fc1::$fallbackDirsPsr0;
-            $loader->classMap = ComposerStaticInit3f573d51b149865ef06c242906550fc1::$classMap;
+            $loader->prefixLengthsPsr4 = ComposerStaticInit0b7d21bead845f78d61233f501552e74::$prefixLengthsPsr4;
+            $loader->prefixDirsPsr4 = ComposerStaticInit0b7d21bead845f78d61233f501552e74::$prefixDirsPsr4;
+            $loader->prefixesPsr0 = ComposerStaticInit0b7d21bead845f78d61233f501552e74::$prefixesPsr0;
+            $loader->fallbackDirsPsr0 = ComposerStaticInit0b7d21bead845f78d61233f501552e74::$fallbackDirsPsr0;
+            $loader->classMap = ComposerStaticInit0b7d21bead845f78d61233f501552e74::$classMap;
 
         }, null, ClassLoader::class);
     }

civicrm/xml/version.xml

 <?xml version="1.0" encoding="iso-8859-1" ?>
 <version>
-  <version_no>5.49.3</version_no>
+  <version_no>5.49.4</version_no>
 </version>