Drupal 7.26 this release fixes security vulnerabilities. Sites are urged to upgrade immediately.

Drupal 7.26 is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration, publishing workflow, discussion capabilities, news aggregation, metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.
Equipped with a powerful blend of features and configurability, Drupal 7.26 can support a diverse range of web projects ranging from personal weblogs to large community-driven sites.
Changes Details
- The database schema of the OpenID module’s “openid_association” table has changed in this release (the “idp_endpoint_uri” column is now the primary key, rather than the “assoc_handle” column). During the update all existing entries in this table will be removed, but the table only stores temporary data and therefore the change is not expected to affect site operation or OpenID logins.
- A new, optional $form_state[‘programmed_bypass_access_check’] element has been added to the form API, for use withdrupal_form_submit(). If this is provided and set to FALSE, drupal_form_submit() will perform the normal form access checks against the current user while submitting the form, rather than bypassing them like it normally does for programmatic form submissions. Any code which passes untrusted data (provided by the current user) to drupal_form_submit() is recommended to use this parameter for security reasons.
[otw_is sidebar=otw-sidebar-8]
More Information
|
[otw_is sidebar=otw-sidebar-7] |
