Problem/Motivation

Drupal 10.3.9 has been released to address advisory SA-CORE-2024-008. This introduces a change where sites are required to allow list a 3rd party database driver if that driver makes use of the `Drupal\Core\Database\StatementPrefetch` class.

As stated in the 10.3.9 release notes, sqlsrv does not require the additional configuration. This is because the current version of the driver does not make use of this class. Should this change in the future, the issue responsible for the change will be required to publish a change notice. Any such issue should reference this issue.

Proposed resolution

Add exlanatory note to project README.

Comments

pstewart created an issue. See original summary.

  • pstewart committed ba8cbf6d on 4.4.x 
    Add SA-CORE-2024-008 explanatory note to README (issue #3488910)
pstewart’s picture

pstewart commented
Status: Active » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.