SA-CONTRIB-2012-073 - Glossary - Cross-Site Scripting (XSS)

Maintenance and security release of the Drupal 7 series. Only fixes for security vulnerabilities have been committed. New features are only being added to the forthcoming Drupal 8.0 release.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

FIX for SA-CONTRIB-2012-066

Resolves issue with Spaces and Spaces OG modules (part of the spaces package) which in some cases did not apply the expected spaces access permission to pages that are non-objects (e.g. /node)

See also: SA-CONTRIB-2012-067 - Linkit - Access bypass

Linkit 7.x-2.3, 2012-04-25
------------------------------

Security advisory: SA-CONTRIB-2012-064 - Ubercart - Multiple vulnerabilities.

Changes since 7.x-3.0:

Security advisory: SA-CONTRIB-2012-064 - Ubercart - Multiple vulnerabilities.

Upgrade notes:

Ensure that only trusted users have roles that have been granted the "administer conditional actions" permission.

Changes since 6.x-2.7: