Fixes from http://drupal.org/node/280571 need to be applied before a release.

CommentFileSizeAuthor
#1 SA-2008-044-7.x.patch10.31 KBdamien tournoud

Comments

damien tournoud’s picture

damien tournoud commented
StatusFileSize
new SA-2008-044-7.x.patch10.31 KB

For reference, here is a reroll of the SA patch for D7.x.

lilou’s picture

lilou commented
Status: Active » Needs review

This issue is it still relevant ?

gpk’s picture

gpk commented

Looks like this may not have made it into HEAD. e.g. in http://api.drupal.org/api/function/openid_menu/7, the delete menu item goes straight to the deletion processing instead of taking the user to a confirmation form.

catch’s picture

catch
he/him
Primary language English
commented
Priority: Normal » Critical
Status: Needs review » Needs work

This doesn't apply any more.

pwolanin’s picture

pwolanin commented
Issue tags: +Security Advisory follow-up

tagging

brianV’s picture

brianV commented
Status: Needs work » Fixed

Just checked each of these fixes, and they exist in current D7 HEAD. Marking as fixed.

gpk’s picture

gpk commented

Yes looks like it was committed 22 Nov 2008: http://drupal.org/cvs?commit=154439.

Status: Fixed » Closed (fixed)
Issue tags: -Security Advisory follow-up

Automatically closed -- issue fixed for 2 weeks with no activity.

Issue tags: +Security Advisory follow-up

Restoring issue tags, see #2125755: System messages removed all issue tags during D7 upgrade.