Security update

See also: SA-CONTRIB-2012-067 - Linkit - Access bypass

Linkit 7.x-2.3, 2012-04-25
------------------------------

Security advisory: SA-CONTRIB-2012-064 - Ubercart - Multiple vulnerabilities.

Changes since 7.x-3.0:

Security advisory: SA-CONTRIB-2012-064 - Ubercart - Multiple vulnerabilities.

Upgrade notes:

Ensure that only trusted users have roles that have been granted the "administer conditional actions" permission.

Changes since 6.x-2.7:

See the security advisory: SA-CONTRIB-2012-062 - Creative Commons - Cross Site Scripting (XSS)

Upgrade notes:

• For the majority of user, nothing further is required. The update prevents users without permission to use an input filter that allows javascript from using it in the custom user message field.
• If you have used javascript in the custom user message, you must change the input filter on the message to a format that supports javascript.

See also SA-CONTRIB-2012-063 - RealName - Cross Site Scripting (XSS).

Changes since 6.x-1.4:

Security fix. Please refer to the security advisory SA-CONTRIB-2012-065 - Sitedoc - Information disclosure for further information.