

Release Notes: Resolves a vulnerability that allows blocked users to appear in user search results, even when the search results are viewed by unprivileged users. An arbitrary PHP code execution vulnerability was also fixed in the file upload module.


Release Notes: Resolves security issues with an access bypass in the user and upload modules as well as arbitrary PHP code execution in the file upload module.


Release Notes: This is a maintenance release. It includes bugfixes and small API/feature improvements only (no major new functionality); significant new features are only being added to the forthcoming Drupal 8.0 release. No security fixes are included in this release. Besides documentation fixes, no changes have been made to the .htaccess, robots.txt, or settings.php files in this release, so upgrading custom versions of those files is not necessary.


Release Notes: This is a maintenance release to fix 17 miscellaneous bugs.


Release Notes: Security vulnerabilities related to a denial of service, unvalidated form redirect, access bypass in the forum listing, access bypass for private images, and access bypass for content administration were fixed.