Question

http://www.question2answer.org/qa/50886/q2a-1-7-4-security-release

https://github.com/q2a/question2answer/commit/fd628cf33ad71be01f3c9b7b144e5a5f53d9e57d

There is no description about vulnerability in Scott post. Therefore, I can not understand the need for this change.

Is it really this is necessary? ? ?

Answer 1

Hello,
According to Scott, the following were fixed in 1.7.4

Admin security fix and other minor improvements, 14th March 2016.

• Various minor fixes to SnowFlat theme. ----> not applicable to pqa
• Support Wordpress database port. -----> not a major upgrade
• Disable SSL checks in email if SMTP security is disabled. ------> not a major fix
• Only allow admins to check plugin versions. -------> Major security fix for 1. 6.xxxxx

Point four is a major security fix for q2a 1.6.xx and a minor change for 1.7.xx
We can include the upgrade in PQA 1.1.x
 

Comments

I saw also history. In addition, I was also confirmed change in the program. However, I feel change is un-necessary.