@see http://cgit.drupalcode.org/webform/tree/ISSUE_TEMPLATE.html

Problem/Motivation

/admin/modules/update is saying that there is a Security update from Webform 7.x-4.15 to 7.x-4.12. Note that 7.x-4.15 is installed but it says I should install 7.x-4.12. Was 4.12 misnamed?

I'm getting this message on different sites and servers. This is the only module that I've seen with this message.

I tested it on simplytest.me and the same problem occurred.

CommentFileSizeAuthor
#7 Screen Shot 2017-09-20 at 7.17.10 AM.png133.83 KBjoelstein
webform-7-version-error.jpg36.15 KBkeithn

Comments

keithn created an issue. See original summary.

bretbenziger’s picture

bretbenziger commented

I'm also getting this security alert.

sainsley’s picture

sainsley commented

I'll third that. I am getting it also.

jackalope’s picture

jackalope commented

Same here on many Drupal 7 sites that we monitor and maintain.

jackalope’s picture

jackalope commented
Version: 7.x-4.x-dev » 7.x-4.15
upunkt’s picture

upunkt commented

Same here. Since I do not find reasonable advice or hints about a vulnerability I keep the current version for the moment. Still, someone of the maintainers please clarify.

joelstein’s picture

joelstein commented
StatusFileSize
new Screen Shot 2017-09-20 at 7.17.10 AM.png133.83 KB

Ditto. I see the alert on a site with the 7.x-3.x branch installed.

dfriedman12’s picture

dfriedman12 commented

I also see the same alert as #7 with Webform 7.x 3.27.

upperholme’s picture

upperholme commented

Ditto

agnesliu’s picture

agnesliu commented

It's also on my website (webform 7.x-4.15). Any ideas?

tvaughn78’s picture

tvaughn78 commented

Have this alert too. Came here to make sure 15 is after 12 :p

keithn’s picture

keithn commented

Today, one day after reporting the issue, I no longer get this error. I checked a bunch of my sites which use webform on different servers and simplytest.me.

I love it when something fixes itself :-)

Keith

criscom’s picture

criscom
Location Graz, Austria
commented

Same for me and still showing.

liam morland’s picture

liam morland
Primary language English
Location Ontario, CA 🇨🇦
commented

Maintainer here. I'm not seeing this problem. 7.x-4.15 is after 7.x-4.12. It might help to clear cache and check for updates again.

upunkt’s picture

upunkt commented

Thanks Liam. One thing came into my mind. Could there be a vulnerability in 4.12 and some skilled person managed to try to trick site maintainers to downgrade? How could this be checked?

liam morland’s picture

liam morland
Primary language English
Location Ontario, CA 🇨🇦
commented

It is possible that the update process was getting out-of-date information. Let's say that drupal.org announced what the latest version is, and mistakenly says 7.x-4.12, sites might see that they have a different version and raise it as an issue. They may not do any version comparison. Someone who is seeing this problem would have to add debugging output to the update manager code to see what is going on.

liam morland’s picture

liam morland
Primary language English
Location Ontario, CA 🇨🇦
commented
Status: Active » Closed (cannot reproduce)

If you are still seeing this, please re-open and provide details.