commerce_ogone 7.x-1.5

Posted by mr.baileys on

Release notes

See SA-CONTRIB-2015-072 - Commerce Ogone - Access bypass

Download Size md5 hash
commerce_ogone-7.x-1.5.tar.gz 14.95 KB b1d151a74ed42f145c9f6aeebae14720
commerce_ogone-7.x-1.5.zip 16.83 KB 2b64a77a5c3de9238f698d27a3764870
Last updated: March 4, 2015 - 14:13
Official release from tag: 
7.x-1.5
⋅ Categories: 7.x, Security update

webform 7.x-4.4

Posted by DanChadwick on

Release notes

This release of 7.x-4.x fixes two security issues, a number of bugs, and introduces new features. Immediate updating is strongly recommended for all users of the 7.x-4.x branch. See SA-CONTRIB-2015-063 - Webform - Cross Site Scripting (XSS) for details.

Download Size md5 hash
webform-7.x-4.4.tar.gz 202.78 KB 7933b2eaa6bfd7648b490c6c1e34f56c
webform-7.x-4.4.zip 249.93 KB 7e70d11e1390e6574cc4f7bfe969e8f6
Last updated: March 3, 2015 - 18:23
Official release from tag: 
7.x-4.4
⋅ Categories: 7.x, Security update, Bug fixes, New features

webform 7.x-3.22

Posted by DanChadwick on

Release notes

This release of 7.x-3.x fixes one security issue. Updating is strongly recommended for all users of the 7.x-3.x branch. See SA-CONTRIB-2015-063 - Webform - Cross Site Scripting (XSS) for details.

Security issue

When a webform is made available as a block, the node's title is used as the default block title. This title is not sufficiently sanitized, leading to a Cross Site Scripting (XSS) vulnerability.

Download Size md5 hash
webform-7.x-3.22.tar.gz 133.43 KB af8e64222a07a850b5d9d1798a1d1bb2
webform-7.x-3.22.zip 168.83 KB c8cc8c061146b93118fb75f7db811a77
Last updated: March 3, 2015 - 18:18
Official release from tag: 
7.x-3.22
⋅ Categories: 7.x, Security update

webform 6.x-3.22

Posted by DanChadwick on

Release notes

This release of 6.x-3.x fixes one security issue. Updating is strongly recommended for all Drupal 6 webform users.
See SA-CONTRIB-2015-063 - Webform - Cross Site Scripting (XSS) for details.

Security issue

When a webform is made available as a block, the node's title is used as the default block title. This title is not sufficiently sanitized, leading to a Cross Site Scripting (XSS) vulnerability.

Download Size md5 hash
webform-6.x-3.22.tar.gz 137.68 KB 138aae51fe4d5010b4baf02dcda15c74
webform-6.x-3.22.zip 173.54 KB 4d3226e670bbfbaf62e1675aa54607df
Last updated: March 3, 2015 - 18:13
Official release from tag: 
6.x-3.22
⋅ Categories: 6.x, Security update

services_basic_auth 7.x-1.3

Posted by markpavlitski on

Release notes

See SA-CONTRIB-2015-050 - Services Basic Authentication - Access bypass

Changes since 7.x-1.1:

Download Size md5 hash
services_basic_auth-7.x-1.3.tar.gz 8.82 KB f49ab800e46961077d3e46b4f81c9bde
services_basic_auth-7.x-1.3.zip 10.46 KB cef88e471fe1cabfb3fbd74329dfbda9
Last updated: March 3, 2015 - 09:13
Official release from tag: 
7.x-1.3
⋅ Categories: 7.x, Security update, Bug fixes

uc_coupon 6.x-1.8

Posted by wodenx on

Release notes

See SA-CONTRIB-2015-064 - Ubercart Discount Coupons - Cross Site Scripting (XSS)

Download Size md5 hash
uc_coupon-6.x-1.8.tar.gz 44.72 KB 6d1b0b13407ce0c0fb8f38e0ab0c99b6
uc_coupon-6.x-1.8.zip 57.42 KB a14f0d84ac119b5782ffdc8e5ab82222
Last updated: February 25, 2015 - 20:53
Official release from tag: 
6.x-1.8
⋅ Categories: 6.x, Security update

Pages

Subscribe with RSS Subscribe to RSS - Security update