Security release: CiviCRM 4.7.26 and 4.6.33. Monthly release 4.7.27

2017-11-01 11:34
Written by
CiviCRM 4.7.26, 4.6.33 and 4.7.27

Please note that 4.6.33, 4.7.26, and 4.7.27 are security releases. All releases include the latest security fixes, and 4.7.27 includes additional bug fixes and enhancements (as a typical monthly release).

Please see below links to the security advisories:


Big thanks to Andrew Hunt from AGH Strategies for putting up together release notes for this version. 
The release notes for 4.7.27 can be accessed  here
The November 1 release is a bit special in providing 4.6.33, 4.7.26, and 4.7.27 concurrently. As always, you can download the highest version from For the intermediate 4.7.26 release, go to the historical archives.


Complete list of 4.7 contributors can be found here.


  •  Core CiviCRM updates:

Adding the ability to add icons to menu items. More details

Convert to timestamp from datetime for new installs. More details

Allow Inline View of Files Instead of Download. More details

Provide option to filter by contact id & external id. More details.


  •  CiviCampaign 

Survey detail report lacks date options, more details

  • CiviCase

Activity API - fetch case details. More details

find cases: search by case ID and subject. More details


  • CiviEvent

​Make event_type_id available in event message templates. More details

  • CiviMember

Make contact custom fields available in Membership Detail report. More details


And many other bug fixes and improvements! 




If you are installing CiviCRM 4.7 from scratch, please use the corresponding automated installer instructions: users:: Prior to 4.7, CiviCRM forced to send out receipt emails regardless of configuration. From 4.7 onwards this will not happen and you should log into your interface and configure whether you want to send out receipts (in addition to those sent by CiviCRM).

Lybunt report users:: Some fields that were previously mandatory on Lybunt are now optional. On new reports they are on by default but you might need to check the fields you want are selected for existing reports.



If your site is highly customized with special code or theming for CiviCRM you will want to upgrade a test copy first and test your customizations. For everyone else, follow these simple steps to get yourself up and running with 4.7.