This function incorrectly calls blocks rather than block (plural DB got dropped from core) and also has a security update to back-port if D6 is supported.

CommentFileSizeAuthor
#2 biblio-2856487-2-biblio_update_6026-is-broken.patch969 bytesAlan D.
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

Alan D. created an issue. See original summary.

Alan D.’s picture

Alan D. CreditAttribution: Alan D. commented
Priority: Normal » Major
Status: Active » Needs review
FileSize
biblio-2856487-2-biblio_update_6026-is-broken.patch969 bytes

The security issue, the title is not sanitized.

Major for the update script being broken, this would never run on an D7 site!

Alternatively, make it a policy to run updates on D6 to biblio 6.x-1.18, then just delete the old D6 crap biblio_update_6027() and below....

Liam Morland’s picture

Liam Morland
Primary language English
Location Ontario, CA 🇨🇦
CreditAttribution: Liam Morland at University of Waterloo commented
Parent issue: » #2856491: Biblio Security Vulnerabilities

Liam Morland’s picture

Liam Morland
Primary language English
Location Ontario, CA 🇨🇦
CreditAttribution: Liam Morland at University of Waterloo commented
Status: Needs review » Fixed

Thanks!

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.