6.x

This is a maintenance release for Simplenews 6.x-2.x that includes a number of bugfixes including a fix for a security issue, see SA-CONTRIB-2013-080 -Simple News - Cross Site Scripting (XSS) for details.

Changes since 6.x-2.0-alpha5:

• by Berdir: Fixed subscriber mail is not run through check_plain() on overview.
• Fixed subscriptions' 'Activated' Views filter

This is a maintenance release for Simplenews 6.x-1.x that includes a number of bugfixes including a fix for a security issue, see SA-CONTRIB-2013-080 -Simple News - Cross Site Scripting (XSS) for details.

Changes since 6.x-1.4:

• by Berdir: Fixed subscriber mail is not run through check_plain() on overview.
• #1387648 by anrikun: Fixed Sender name is MIME-encoded twice.

Initial release of Mollom Blacklist

* Vulnerability one - remote code execution possibility through json_decode implementation in the block reaction. This update removes the implementation in the block reaction and you will need to ensure your version of PHP included a json_decode function before applying.

Fixes:

• Fixed minor code flaws.

Updates:

• Updated README.txt

Note: There has been a version mess-up today (see 6.x-1.0 which is the wrong one). This here is right.

Fixes:

• Fixed minor code flaws.

Updates:

• Updated README.txt