7.x

SA-CONTRIB-2014-065 - Custom Meta - Cross Site Scripting (XSS)

Addressed in this release

SECURITY UPDATE
Fix issue where course object edit form is visible to all.
SA-CONTRIB-2014-064 -Course - Access bypass

Development build containing the latest changes until a stable version.

A serious security issue is fixed in this small release. Until now it was possible to bypass the argument validation in the card listing view. The exception value was left as the default setting, which is hidden in a collapsed fieldset in Views' contextual filter configuration. Users could simply list all cards visiting the URI, user/all/cards. Last four digits, names on the cards and expiration dates were exposed.

First release (promotion of sandbox code)

Development Release of Drupal PM (Project Management).
This is the core package of the Drupal PM (Project Management) Suite.

This release is refreshed daily at noon and midnight based on the 7.x-2.x branch in Git.