I got a securtity update alert this morning from a site running DS 7.x-1.10, urging to update to 7.x-2.16. However, it is recommended to stay with the branch you're running. Plus the security issue fixed in 1.10 was fixed in 2.15 and there is not such a fix in 2.16 so this message seems wrong to me.
Question: Why did it pop up? Is it a mistake? Or could it be possible that any third party tries to trick me into upgrading to 2.16 and possibly breaking the site? I prefer dong nothing until this is clear to me.
Thanks for any input on this.

Comments

upunkt created an issue. See original summary.

aspilicious’s picture

aspilicious commented
Status: Active » Fixed

I made the 7.1 branch unsupported because I'm not putting any energy into it.
That's why it is marked as a potential security risk.

Upgrading to 7.2 will brake your layouts and you have to reconfigure them.

I didn't know marking it as unsupported would have this effect, so I marked it supported again.

upunkt’s picture

upunkt commented
Status: Fixed » Active

Oh, didn't know that either…thanks for your quick response. I cannot confirm this fixed the issue, maybe the system needs some time and cache refreshment. I'll wait a couple of hours and report back.

aspilicious’s picture

aspilicious commented
Status: Active » Fixed

Marking this as fixed because that's the only thing I can do as a module maintainer.

upunkt’s picture

upunkt commented

Thanks, fixed.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.