Subject: CVS commit: [pkgsrc-2021Q4] pkgsrc/www/drupal7
From: Benny Siegert
Date: 2022-01-30 17:56:53
Message id: 20220130165653.E0A9BFB24@cvs.NetBSD.org

Log Message:
Pullup ticket #6574 - requested by taca
www/drupal7: security fix

Revisions pulled up:
- www/drupal7/Makefile                                          1.75
- www/drupal7/PLIST                                             1.29
- www/drupal7/distinfo                                          1.59

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Thu Jan 27 13:38:03 UTC 2022

   Modified Files:
   	pkgsrc/www/drupal7: Makefile PLIST distinfo

   Log Message:
   www/drupal7: update to 7.86

   Drupal 7.86, 2022-01-18
   -----------------------
   - Fixed security issues:
      - SA-CORE-2022-001
      - SA-CORE-2022-002

   Drupal 7.85, 2022-01-12
   -----------------------
   - Fix session cookies for sites with different base_urls but a shared domain

   Drupal 7.84, 2021-12-13
   -----------------------
   - Hotfix for session cookie domain on www subdomains

   Drupal 7.83, 2021-12-01
   -----------------------
   - Initial support for PHP 8.1
   - The has_js cookie has been removed (but can be re-enabled)
   - The leading www. is no longer stripped from cookie domain by default
   - The user entity now has a "changed" property
   - Introduced a skip_permissions_hardening setting
   - Changes to the password reset process to avoid email and username enumeration
   - Various bug fixes, optimizations and improvements

Files:
RevisionActionfile
1.74.4.1modifypkgsrc/www/drupal7/Makefile
1.28.4.1modifypkgsrc/www/drupal7/PLIST
1.58.2.1modifypkgsrc/www/drupal7/distinfo