Path to this page:
Subject: CVS commit: [pkgsrc-2021Q4] pkgsrc/www/drupal7
From: Benny Siegert
Date: 2022-01-30 17:56:53
Message id: 20220130165653.E0A9BFB24@cvs.NetBSD.org
Log Message:
Pullup ticket #6574 - requested by taca
www/drupal7: security fix
Revisions pulled up:
- www/drupal7/Makefile 1.75
- www/drupal7/PLIST 1.29
- www/drupal7/distinfo 1.59
---
Module Name: pkgsrc
Committed By: taca
Date: Thu Jan 27 13:38:03 UTC 2022
Modified Files:
pkgsrc/www/drupal7: Makefile PLIST distinfo
Log Message:
www/drupal7: update to 7.86
Drupal 7.86, 2022-01-18
-----------------------
- Fixed security issues:
- SA-CORE-2022-001
- SA-CORE-2022-002
Drupal 7.85, 2022-01-12
-----------------------
- Fix session cookies for sites with different base_urls but a shared domain
Drupal 7.84, 2021-12-13
-----------------------
- Hotfix for session cookie domain on www subdomains
Drupal 7.83, 2021-12-01
-----------------------
- Initial support for PHP 8.1
- The has_js cookie has been removed (but can be re-enabled)
- The leading www. is no longer stripped from cookie domain by default
- The user entity now has a "changed" property
- Introduced a skip_permissions_hardening setting
- Changes to the password reset process to avoid email and username enumeration
- Various bug fixes, optimizations and improvements
Files: