User: islandusurper Branch: DRUPAL-6--2 Date: Wed, 11 Aug 2010 17:52:20 +0000 Modified files: /modules/ubercart/payment/uc_2checkout uc_2checkout.module uc_2checkout.pages.inc /modules/ubercart/payment/uc_paypal uc_paypal.module uc_paypal.pages.inc /modules/ubercart/uc_cart_links uc_cart_links.admin.inc uc_cart_links.install uc_cart_links.pages.inc Log message: Security Fix: UC 2Checkout doesn't validate the payment notification properly. PayPal WPS doesn't verify the receiver's email address. UC Cart Links adds unpublished products to the cart and allows the cart to be emptied from any site. Links: http://cvs.drupal.org/diff.php?path=contributions/modules/ubercart/payment/u... http://cvs.drupal.org/diff.php?path=contributions/modules/ubercart/payment/u... http://cvs.drupal.org/diff.php?path=contributions/modules/ubercart/payment/u... http://cvs.drupal.org/diff.php?path=contributions/modules/ubercart/payment/u... http://cvs.drupal.org/diff.php?path=contributions/modules/ubercart/uc_cart_l... http://cvs.drupal.org/diff.php?path=contributions/modules/ubercart/uc_cart_l... http://cvs.drupal.org/diff.php?path=contributions/modules/ubercart/uc_cart_l...