Elgg 1.11.5 and 1.10.6 are now available.

These are important to sites using memcache, as they contain the fix #9109. Without this fix, database credentials are accidentally stored in memcache values. 1.12.5 was already previously released to address this issue.

Both changelogs are below.

1.11.5

Contributors

• Steve Clay (1)
• Juho Jaakkola (1)

Bug Fixes

• views: Sticky values now get passed into views extending register/extend (Fixes #8873)
• memcache: don't store a copy of $CONFIG in file objects (Fixes #9081)

1.10.6

Contributors

• Jerôme Bakker (5)
• Juho Jaakkola (2)
• Evan Winslow (2)
• Mariano Aguero (1)
• akudan (1)
• Steve Clay (1)
• Jeroen Dalsem (1)

Bug Fixes

• views: Sticky values now get passed into views extending register/extend (e241e82e, closes #8873)
• memcache: don't store a copy of $CONFIG in file objects (beb90891), closes #9081)
• messageboard: provide correct link to users messageboard (Fixes #8170)
• notifications: correctly use elgg_log instead of error_log (Fixes #8039)
• i18n:
  • ckeditor now uses user's own language instead of the site language
  • do not let empty translation arrays disable plugins (Fixes #8116)

Chores

• notification: no more typehint errors when sending a notificationas an ElggGroup (Fixes #7949)
• thewire: improved error handling when removing a wire post (Fixes #7003)
• core: catch login exceptions during password change (Fixes #7948)