addtoany 8.x-1.11

Security update
Insecure

This release adds a notice to the Permissions page about giving administrative permission to trusted roles only.

AddToAny Share Buttons - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-039.

addtoany 7.x-4.16

Security update
New features

This release allows AddToAny Follow/Subscribe buttons to initialize in addition to AddToAny Share buttons, and adds a notice to the Permissions page about giving administrative permission to trusted roles only.

back_to_top 7.x-1.6

Security update

Back To Top - Moderately critical - Cross Site Scripting - SA-CONTRIB-2019-040

Changes since 7.x-1.5:

  • Issue #2643976 by Triumphent, roger_k, vadym.kononenko: Upgrade: Button no longer shows
  • Remove hook install
  • Update button text

views 7.x-3.21

Security update

This resolves issues for the following security advisories:

No other changes are included.

shs 7.x-1.8

Security update

Security release to fix Simple hierarchical select - Moderately critical - Cross site request forgery - SA-CONTRIB-2019-038.
If you cannot update, uncheck the option "Allow creating new terms" in the configuration of your fields.

This release also contains some code style fixes.

No other significant changes have been made since the 7.x-1.7 release.

Pages

Subscribe with RSS Subscribe to RSS - Security update