So this applies to all branches pre-7.x.

Modalframe maintainers apparently deleted their old releases. The only one I see is 1.9.

This breaks 6.x-2.x and 1.x.

CommentFileSizeAuthor
#1 2193065-modalframe-version.patch478 bytesjon pugh
#3 2193065-modalframe-version-1.x.patch440 bytesjon pugh
#6 2193065-modalframe-version-1.x-6.patch797 bytesjon pugh
#5 2193065-modalframe-version-1.x-5.patch796 bytesjon pugh
#4 2193065-modalframe-version-1.x-4.patch487 bytesjon pugh
#4 2193065-modalframe-version-2.x-4.patch478 bytesjon pugh

Comments

jon pugh’s picture

jon pugh
he/him
Primary language English
Location Newburgh, NY
commented
StatusFileSize
new 2193065-modalframe-version.patch478 bytes
jon pugh’s picture

jon pugh
he/him
Primary language English
Location Newburgh, NY
commented
Status: Active » Needs review
jon pugh’s picture

jon pugh
he/him
Primary language English
Location Newburgh, NY
commented
StatusFileSize
new 2193065-modalframe-version-1.x.patch440 bytes

Backport patch for 1.x

jon pugh’s picture

jon pugh
he/him
Primary language English
Location Newburgh, NY
commented
StatusFileSize
new 2193065-modalframe-version-1.x-4.patch487 bytes
new 2193065-modalframe-version-2.x-4.patch478 bytes

Oops, apparently modalframe 1.9 requires an update to jquery ui too.

Attached patches for both 2.x and 1.x

jon pugh’s picture

jon pugh
he/him
Primary language English
Location Newburgh, NY
commented
StatusFileSize
new 2193065-modalframe-version-1.x-5.patch796 bytes

Adding jquery ui library update.

jon pugh’s picture

jon pugh
he/him
Primary language English
Location Newburgh, NY
commented
StatusFileSize
new 2193065-modalframe-version-1.x-6.patch797 bytes

Oops bad url

helmo’s picture

helmo commented

Related: #2191827: Update modalframe + jquery*

jon pugh’s picture

jon pugh
he/him
Primary language English
Location Newburgh, NY
commented

Doh! didn't see that. I searched but I guess my eyes failed me...

Duplicate?

helmo’s picture

helmo commented
Status: Needs review » Closed (duplicate)

Yes, lets lets continue this in #2191827: Update modalframe + jquery*.

The reason for deleting the releases was the lack of maintainer response to the security team.
@dsnopek was added as a new maintainer recently but not made aware of the open issue. After the public announcement he stepped in.