is it recommended to apply security updates or wait for openscholar update

Events happening in the community are now at Drupal community events on www.drupal.org.
spiritcapsule's picture

On a normal Drupal installation, we would apply security updates for Core and modules as soon as possible. But, in the case of OpenScholar, is that the recommended practice? Or it is advisable to wait for the next release of OpenScholar. (Obviously a risk.)

I ask because OpenAtrium (another install profile) recommends waiting, but they publish updates more quickly it seems. https://community.openatrium.com/documentation-en/node/1985

I'm not sure if it is advisable to wait in general when using an installation profile or if that's just how OpenAtrium does it.

Comments

It is usually best to wait,

rbrandon's picture

It is usually best to wait, since in some cases updates can overwrite essential patches or cause unintended action. That said sometimes the security threat is such that you feel you need to update immediately. I would look at the updates case-by-case and install only those updates that you feel are necessary.

-Richard

Is this still best practice?

Elem Enoh's picture

I am new to Drupal and really interested in getting OS to work for me. I am working on my 3rd installation of OS (I keep breaking it) and noticed that it has 7.22 Core and wants other "Security updates". Should I keep everything AS IS? It is natural for me to want everything up to date.

Also, Is it possible to make ALL themes "Responsive"?

Get

btopro's picture

Get https://drupal.org/project/hacked and see if they changed core. If they didn't then GENERALLY speaking it is GENERALLY SAFE to upgrade core without an issue. I say this because I've never had an issue on any distribution, site, ever in upgrading Drupal 7 core (except the whole image security thing in .20 to .21 but that's an inconvenience not broken contrib). This is a general comment not specific to OS as nothing should be distro specific so long as the core of drupal is unmodified, otherwise you'll need to apply their patches to keep it running.

Thank you for the response.

Elem Enoh's picture

I will look into that. I am still nervous about changing any modules again. I still haven't even figured out how to apply a patch correctly, much less undo something stupid I might have done.

I really appreciate your input... and your contributions to Drupal.

@Elam, fyi .. we have a

ferdi's picture

@Elam, fyi .. we have a couple of small patches for Drupal core https://github.com/openscholar/openscholar/blob/SCHOLAR-3.x/openscholar/...

Thanks!

Thank you ferdi, but have questions..

Elem Enoh's picture

I apologize for elementary issues, but I have been working for about 8 hrs now trying to learn how to patch. I have tried many different ways. So far the best I can figure out is cygwin. Here is my log, I don't know where to go from here.

Dell@Dell-PC ~
$ cd c:/xampp/htdocs/os.com/modules/taxonomy

Dell@Dell-PC /cygdrive/c/xampp/htdocs/os.com/modules/taxonomy
$ patch -p0 < order-weighted-terms-941266-35-D7.patch
can't find file to patch at input line 5
Perhaps you used the wrong -p or --strip option?

The text leading up to this was:

|diff --git a/modules/taxonomy/taxonomy.admin.inc b/modules/taxonomy/taxonomy.admin.inc
|index 828fde0..e5346b0 100644
|--- a/modules/taxonomy/taxonomy.admin.inc

|+++ b/modules/taxonomy/taxonomy.admin.inc

File to patch: taxonomy.admin.inc
patching file taxonomy.admin.inc
Reversed (or previously applied) patch detected! Assume -R? [n]
Apply anyway? [n]
Skipping patch.
2 out of 2 hunks ignored -- saving rejects to file taxonomy.admin.inc.rej

Dell@Dell-PC /cygdrive/c/xampp/htdocs/os.com/modules/taxonomy
$ patch -p1 <order-weighted-terms-941266-35-D7.patch
can't find file to patch at input line 5
Perhaps you used the wrong -p or --strip option?

The text leading up to this was:

|diff --git a/modules/taxonomy/taxonomy.admin.inc b/modules/taxonomy/taxonomy.admin.inc
|index 828fde0..e5346b0 100644
|--- a/modules/taxonomy/taxonomy.admin.inc

|+++ b/modules/taxonomy/taxonomy.admin.inc

File to patch: taxonomy.admin.inc
patching file taxonomy.admin.inc
Reversed (or previously applied) patch detected! Assume -R? [n]
Apply anyway? [n] y
Hunk #1 FAILED at 445.
Hunk #2 succeeded at 566 (offset 30 lines).
1 out of 2 hunks FAILED -- saving rejects to file taxonomy.admin.inc.rej

Dell@Dell-PC /cygdrive/c/xampp/htdocs/os.com/modules/taxonomy
$

**I would like to get netbeans to work, but I keep getting the error "The patch cannot be applied in the selected context"

Same on Gnuwin32

Elem Enoh's picture

Hunk 1 also failed with Gnuwin32?...

Just discovered the patch worked on 7.23 taxonomy module. I've been working with 7.22

Should I update the Core?

Have Patience

Elem Enoh's picture

I realized that the link was to a .make file. I applied the individual patches. Today I learned a little about drush make.

**After Review... It also looks like OS 3.8.1 included those patches.?

OpenScholar

Group organizers

Group notifications

This group offers an RSS feed. Or subscribe to these personalized, sitewide feeds: