7.x-1.41 Release

CHANGELOG.txt

+Drupal 7.88, 2022-02-15
+-----------------------
+- Fixed security issues:
+   - SA-CORE-2022-003
+
 Drupal 7.87, 2022-01-19
 -----------------------
 - Fix regression caused by jQuery UI position() backport

includes/bootstrap.inc

@@ -8,7 +8,7 @@
 /**
  * The current system version.
  */
-define('VERSION', '7.87');
+define('VERSION', '7.88');
 
 /**
  * Core API compatibility.

includes/form.inc

@@ -2087,7 +2087,7 @@ function _form_builder_handle_input_element($form_id, &$element, &$form_state) {
   // #access=FALSE on an element usually allow access for some users, so forms
   // submitted with drupal_form_submit() may bypass access restriction and be
   // treated as high-privilege users instead.
-  $process_input = empty($element['#disabled']) && (($form_state['programmed'] && $form_state['programmed_bypass_access_check']) || ($form_state['process_input'] && (!isset($element['#access']) || $element['#access'])));
+  $process_input = empty($element['#disabled']) && ($element['#type'] !== 'value') && (($form_state['programmed'] && $form_state['programmed_bypass_access_check']) || ($form_state['process_input'] && (!isset($element['#access']) || $element['#access'])));
 
   // Set the element's #value property.
   if (!isset($element['#value']) && !array_key_exists('#value', $element)) {

profiles/wcm_base/CHANGELOG.txt

+WCM Base 7.x-1.41, 2022-02-16
+-----------------------------
+- WCM Base: Updated Drupal core to 7.88 per SA-CORE-2022-003.
+
+WCM Base 7.x-1.40, 2022-01-20
+-----------------------------
+- WCM Base: Updated Drupal core to 7.87.
+- OCIO WYSIWYG: Reverted WYSIWYG contrib module to 2.5 due to Linkit bug.
+
 WCM Base 7.x-1.39, 2022-01-06
 -----------------------------
 - WCM Base: Updated Drupal core to 7.84.