Drupal 5.18

The eighteenth maintenance and security release of the Drupal 5 series. Only fixes for security vulnerabilities and other bugs have been committed. New features are only being added to the forthcoming Drupal 7.0 release.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

• SA-CORE-2009-006 Drupal core - Cross site scripting

In addition to this security vulnerability, the following bugs have been fixed since the 5.15 release:

• #396224 partial rollback of SA-CORE-2009-003 security hardening.
• #396224 adding missing documentation comment update. By dvessel and pwolanin.
• #267305 by brianV. Remove ?>.
• #305544 by jsenich. Add missing clear-block to admin by modules.
• #330084 by c960657: Remove unnecessary duplication of the From header value in Reply-to; standards indicate setting the From header should be sufficient.