[SECURITY] Fedora 22 Update: drupal7-7.38-1.fc22

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 21 Update: drupal6-6.36-1.fc21

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 22 Update: drupal6-6.36-1.fc22

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

MGASA-2015-0253 Updated drupal package fixes security vulnerability

Incorrect cache handling made private content viewed by "user 1" exposed to other, non-privileged users CVE-2015-3231. A flaw in the Field UI module made it possible for attackers to redirect users to malicious sites CVE-2015-3232. Due to insufficient URL validation, the Overlay module could be...

Updated drupal package fixes security vulnerability

Incorrect cache handling made private content viewed by "user 1" exposed to other, non-privileged users CVE-2015-3231. A flaw in the Field UI module made it possible for attackers to redirect users to malicious sites CVE-2015-3232. Due to insufficient URL validation, the Overlay module could be...

Views Bulk Operations - Moderately critical - Access Bypass - SA-CONTRIB-2015-131

The Views Bulk Operations module enables you to add bulk operations to administration views, executing actions on multiple selected rows. The module doesn't sufficiently guard user entities against unauthorized modification. If a user has access to a user account listing view with VBO enabled suc...

Migrate - Less critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-130

This module enables you to manage migration processes through the administrative UI. The module doesn't sufficiently sanitize destination field labels thereby exposing a Cross Site Scripting vulnerability XSS. This vulnerability is mitigated by the fact that an attacker must have a role with...

Drupal Acquia Cloud Site Factory Connector Module Open Redirect Vulnerability

Drupal is a free and open source content management system developed in PHP. An open redirection vulnerability exists in the Drupal Acquia Cloud Site Factory Connector module, which allows an attacker to construct a malicious URI, trick users into parsing it, and redirect users to an arbitrary WE...

Drupal HTTP Strict Transport Security module authentication bypass vulnerability

Drupal is a free and open source content management system developed in PHP language.HTTP Strict Transport Security is a new Web security protocol module. Drupal HTTP Strict Transport Security module has an authentication bypass vulnerability that allows remote attackers to exploit vulnerabilitie...

Drupal eXtensible Catalog Drupal Toolkit Module Cross-Site Request Forgery Vulnerability

Drupal is a free, open source content management system developed in PHP. eXtensible Catalog XC Drupal Toolkit is a new generation of discovery services XC Drupal Toolkit module . A cross-site request forgery vulnerability exists in the Drupal eXtensible Catalog Drupal Toolkit module that allows...

Drupal Content Construction Kit Module Open Redirect Vulnerability

Drupal is a free and open source content management system developed in PHP. An open redirection vulnerability exists in the Drupal Content Construction Kit module that allows an attacker to construct a malicious URI, trick users into parsing it, and redirect users to an arbitrary WEB site for...

Drupal Administration Views Module Access Bypass Vulnerability

Drupal is a free and open source content management system developed in PHP. An access bypass vulnerability exists in the Drupal Administration Views module, which allows an attacker to obtain sensitive information...

Drupal Inline Entity Form Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in the Drupal Inline Entity Form module, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain sensiti...

Drupal LABjs module open redirection vulnerability

Drupal is a free and open source content management system developed in PHP. An open redirection vulnerability exists in the Drupal LABjs module that allows an attacker to construct malicious URIs, trick users into parsing them, and redirect users to arbitrary WEB sites for phishing attacks...

Drupal Render Cache System Information Disclosure Vulnerability

Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. An information disclosure full vulnerability exists in the Render caching system in versions 7.x prior to Drup...

Drupal Overlay Module Open Redirect Vulnerability

Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. An open redirection vulnerability exists in the Overlay module in versions 7.x prior to Drupal 7.38. A remote...

Drupal OpenID Module Session Hijacking Vulnerability

Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. A session hijacking vulnerability exists in the OpenID module in Drupal versions 6.x before 6.36 and 7.x befor...

Drupal jQuery Update Module Open Redirect Vulnerability

Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. An open redirection vulnerability exists in the Drupal jQuery Update module version 7.x-2.x before 7.x-2.6,...

Drupal Field UI Module Open Redirect Vulnerability

Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. An open redirection vulnerability exists in the Field UI module in versions 7.x prior to Drupal 7.38. A remote...

Drupal Apache Solr Real-Time Module Access Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Apache Solr Real-Time is one of the search engine modules. An access bypass vulnerability exists in the Drupal Apache Solr Real-Time module in versions 7.x-1.2 prior to 7.x-1.x. An...