...
Can not handle CQL filters with apostrophes in some situations
If a filter contains ' it needs to be changed to '' before being parsed.
SQL Server spatial engine still requires host to be set when using url
If you use a URL to specify the database connection for a SQL Server spatial engine you should not need to set the host tag in the connection details but that tag was marked as required so would need to be set even though it was ignored.
Redline stops working if polygon tool is active when map is resized
If the redline polygon tool is active and the map is resized the redline tools stop working.
Not all metric are being reported
A change in the caching of metrics has resulted in some metrics not being exposed.
Reset button is hidden on search panel when only one search is available
Because of a change to the layout of the search panel toolbar if there is only one search available the entire toolbar is hidden, which includes hiding the reset button.
Audit Edit Configuration checkbox parameter reference returns wrong value
Writing a checkbox value to an audit table does not take care of converting the boolean value to a value supported by the underlying table column type.
ToC description overwritten by map engine description
Setting the layer description in the toc model should override what the map engine provides.
XSS issue in login page
If you're using the obsolete Acegi security login plugin there's a possible cross site scripting vulnerability.
Fix handling of invalid geometry with raster functions
If a user generates invalid geometry raster functions should report an error rather than trying to process the geometry.
...