This release contains a security fix for DKAN, which resolves an issue where under certain circumstances passing malicious parameters on the search page could cause PHP to load the contents of an external URL into memory. We are working with the maintainers of two modules to see if this requires an upstream fix, but the patch included here remediates the issue as it appears in DKAN.
Breaking Changes
This release contains a breaking change (#2842) to the prepareMetadataSourceHelper() in the HarvestMigration class. If you have a custom Harvest Source type that implements this method you will need to update the return value -- see this commit message.
Changelog
- #2873 Patch globalredirect to fix network issue
- #2874 Security update for Drupal to 7.67 (SA-CORE-2019-007)
- #2730 Behat test improvements
- #2862 Add primary key to datastore tables. Create hook_datastore_post_import to allow users to execute actions right after data has been imported into the datastore.
- #2842 Fix harvest migration message logging for batched migrations