drupal 7.56

Maintenance and security release of the Drupal 7 series.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the notes below and the security announcement:

• Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-003

No other fixes are included.

No changes have been made to the .htaccess, web.config, robots.txt or default settings.php files in this release, so upgrading custom versions of those files is not necessary.

Known issues:

• When a site updates to this release, an anonymous user who is currently in the process of creating content and has already uploaded a private file (but not yet submitted the content) will lose the ability to view a preview of that file. This is a transient issue only, and it will not occur for future file uploads.
• Certain file-related contributed modules (such as Multiupload Filefield Widget and FileField Sources) may have a minor regression related to this release, which will cause anonymous users who upload private files to lose the ability to view a preview of that file before it is submitted. Affected modules will need to update their code to fix the regression. For more information, see the issues for the individual modules:
  • Multiupload Filefield Widget: #2888307: Previews of private files uploaded by anonymous users don't work in Drupal 7.56
  • FileField Sources: #2888308: Update custom version of file_save_upload() to match Drupal 7.56