elf 7.x-3.1

Git tag 7.x-3.1
Security update

Add a CSRF token that protects the redirect URL from the open use.

External Links Filter - Moderately critical - Open Redirect Vulnerability - SA-CONTRIB-2019-063

forms_steps 8.x-1.2

Git tag 8.x-1.2
Security update

Security release

Forms Steps allows the form to be displayed and the content to be edited through Forms Steps workflow entities. So even if a permission is set to the content type, users were able to use the Forms Steps workflow entities to access and create contents.

metatag 8.x-1.9

Git tag 8.x-1.9
Security update

This contains a single change from 8.x-1.8 to resolve SA-CONTRIB-2019-058.

Note: because of the changes in this release, meta tags will no longer be displayed when the site is in maintenance mode.

Full changelog

Changes since v8.x-1.8:

existing_values_autocomplete_widget 8.x-1.2

Git tag 8.x-1.2
Security update

Fixes security advisory Existing Values Autocomplete Widget - Critical - Access bypass - SA-CONTRIB-2019-060.

drupal 8.7.5

Git tag 8.7.5
Security update
Insecure

Maintenance and security release of the Drupal 8 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

No other fixes are included.

imagecache_actions 7.x-1.10

Git tag 7.x-1.10
Security update

Fixes: ImageCache Actions - Critical - Multiple Vulnerabilities - SA-CONTRIB-2019-056

  • Use json for exporting image styles.
  • Introduce new permission for importing image styles marked as having security implications.

Pages

Subscribe with RSS Subscribe to RSS - Security update