drupal7 -- security update

2014-10-15T00:00:00
ID DSA-3051
Type debian
Reporter Debian
Modified 2014-10-15T00:00:00

Description

Stefan Horst discovered a vulnerability in the Drupal database abstraction API, which may result in SQL injection.

For the stable distribution (wheezy), this problem has been fixed in version 7.14-2+deb7u7.

For the unstable distribution (sid), this problem has been fixed in version 7.32-1.

We recommend that you upgrade your drupal7 packages.