User: islandusurper Branch: DRUPAL-5 Date: Wed, 11 Aug 2010 18:15:57 +0000 Modified files: /modules/ubercart/payment/uc_2checkout uc_2checkout.module /modules/ubercart/payment/uc_paypal uc_paypal.module /modules/ubercart/uc_cart_links uc_cart_links.install uc_cart_links.module Log message: Security Fix: UC 2Checkout doesn't validate the payment notification properly. PayPal WPS doesn't verify the receiver's email address. UC Cart Links adds unpublished products to the cart and allows the cart to be emptied from any site. Links: http://cvs.drupal.org/diff.php?path=contributions/modules/ubercart/payment/u... http://cvs.drupal.org/diff.php?path=contributions/modules/ubercart/payment/u... http://cvs.drupal.org/diff.php?path=contributions/modules/ubercart/uc_cart_l... http://cvs.drupal.org/diff.php?path=contributions/modules/ubercart/uc_cart_l...