* Integrates with core's Update Status module.
This is a security release of the Drupal 7 series.
This release fixes security vulnerabilities. Sites are urged to update immediately after reading the notes below and the security announcements:
Eloqua - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-063.
Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062
@bohart, @abramm
PHP notices and warnings fixes.
https://www.drupal.org/sa-contrib-2024-061
Along with other protections, this release adds the 'allowed_classes' => FALSE option to unserialize() when importing content using the relevant format.
'allowed_classes' => FALSE
unserialize()
See: https://www.php.net/manual/en/function.unserialize.php