Download og-7.x-2.4.tar.gztar.gz 254.69 KB
MD5: 8e90a1511defdf4ea963861847bca549
SHA-1: 633b3aad72d4402771e08769c6346f85a567bedb
SHA-256: 920024b72edcc2a7a9dbbfa9f9edbdb477b8619a42fe7a43e46012b81e88153e
Download og-7.x-2.4.zipzip 307.34 KB
MD5: 5317a48676c986b7b485a68711924f63
SHA-1: a749a0697ba09d6d76b10905865ba3782e00e76f
SHA-256: 9848278a8dae7d8bf7b4d9a875d4f93499a15e2bc837b96026b9373f4f786207

Release info

Created by: amitaibu
Created on: 20 Nov 2013 at 18:18 UTC
Last updated: 7 May 2014 at 19:55 UTC
Core compatibility: 7.x
Release type: Security update, Bug fixes

Release notes

Changes since 7.x-2.3:

DRUPAL-SA-CONTRIB-2013-095 - Organic Groups - Access bypass

  • Better validate group audience fields.
  • Fix migrate related failing test.
  • #2118253 by NofarG: Incorrect docs in og_ui_subscribe()
  • #1997280 by NofarG: incorrect docs for og_get_all_group_entity()?
  • #1981406 by RoySegall: Field cache isn't cleared after saving an OG membership
  • #2099193 by czigor: Variable name typo
  • #1565546 follow up: Move migrate files under correct folder.
  • #2087789 by joachim: UI, DX, and performance improvements to _og_access_verify_access_field_existence()
  • #1565546 by SebCorbin, pgillis: OG User Roles (OGUR) upgrade path
  • #1816800 by othermachines, hernani: Integration of OG Grant Roles with Rules
  • #2063385 by ezra-g: _og_access_verify_access_field_existence() assumes node group type, throws an exception rebuilding node access
  • #1983450 by Cottser: Can't unset og_node_create_links destination
  • #2058709 by Kars-T: og_node_access() should use countReferencableEntities() instead of getReferencableEntities


The selected release is the release that will be used for automated testing. Optional projects are only used for testing.