Updated: The file manifest carries the checksums of the kernel and library fixes from the logs, their tests and the changelog

Updated: The 6.0.15 changelog lists the kernel and library fixes found in the logs on 6 October

Fixed: Every login without a RedirectURI field logged the error "No such action parameter: UserRedirectURI"; the field is read only when it is posted

RedirectURI is optional and the view already falls back when it is empty, but it
asked for the parameter unconditionally (26 such errors in today's error log, from
the admin and site login on both servers). Behaviour is unchanged.

Fixed: eZPolicy::saveTemporary() did not refuse a policy that is not a temporary copy; it does again

The guard compared original_id with === 0, but the database returns it as the
string "0", so a final policy passed and the method went on to fetch policy 0 and
call removeThis() on nothing. The value is compared as an integer.

Test: eZPolicySaveTemporaryTest (no database).

Fixed: The SOAP server warned "Undefined array key 1" for every call to a plain function and stopped with a TypeError when no function was registered; both answer as before without it

processRequest() split the requested name on '::' straight into two variables; a
plain function name has one part only (49 warnings in the web server's error log).
FunctionList started as null, so in_array() on it was a TypeError for a server
with nothing registered; it starts as an empty list, and an unknown function is
answered with a SOAP fault.

Test: eZSOAPServerFunctionNameTest (no network, no database).

Fixed: eZModule::addGlobalPathList() warned "Undefined global variable $eZModuleGlobalPathList" when no path list had been set yet; it starts an empty list

The check read the global before testing that it exists. It is in the web
server's error log 35 times since 1 October, from a cronjob path that adds module
paths before any are set, and in Velocity's console log.

Test: eZModuleTest::testAddGlobalPathListBeforeAnyIsSetRaisesNoWarning.

Fixed: Run from the engine archive, the audit log looked for its directory inside the archive and every record went to the error log instead; it is written to var/site/log/audit again

expAuditConfig::root() was dirname( __DIR__, 3 ), which inside dist/engine.phar is
the archive itself, so the log directory became
phar://.../engine.phar/var/site/log/audit. Each record failed with "The audit
directory ... cannot be created" and was spilled to the error log (seen on the
FrankenPHP server, which runs from the archive). Loaded from an archive it now uses
EXP_ROOT_DIR, which autoload.php publishes from disk; an overridden root still wins.

Test: expAuditConfigRootTest loads the class from a small archive in a separate
PHP process (no database).