Debian: Security Advisory (DLA-2721-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2721-1] drupal7 security update

Debian LTS Advisory DLA-2721-1 [email protected] https://www.debian.org/lts/security/ Gunnar Wolf July 26, 2021 https://wiki.debian.org/LTS Package : drupal7 Version : 7.52-2+deb9u16 CVE ID : CVE-2021-32610 The Drupal project uses the pear ArchiveTar library, which has released a securi...

Directory Traversal

drupal7 is vulnerable to directory traversal. An attacker is able to read or overwrite arbitrary system files if the archivetar library is used to extract tar archives from untrusted source...

FreeBSD : drupal7 -- fix possible CSS (f70ab05e-be06-11eb-b983-000c294bb613)

Drupal Security team reports : Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. Not all sites and users are affected, but configuration changes to prevent the exploit might be impractical and will vary between sites. Therefore, we recommend...

Open Redirection

drupal7 is vulnerable to open redirection. Insufficient validation of the destination query parameter in the drupalgoto function allows an attacker to redirect a user to a malicious site...

Debian DLA-2637-1 : drupal7 security update

The Drupal project identified a vulnerability in the sanitization performed in the filterxssarttributes function, potentially allowing a cross-site scripting, and granted it the Drupal Security Advisory ID SA-CORE-2021-002 : https://www.drupal.org/sa-core-2021-002 No CVE number has been announced...

Debian: Security Advisory (DLA-2637-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA-2637-1] drupal7 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2637-1 [email protected] https://www.debian.org/lts/security/ Gunnar Wolf April 23, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

DLA-2637-1 drupal7 - security update

Bulletin has no description...

drupal7 -- fix possible CSS

Drupal Security team reports: Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. Not all sites and users are affected, but configuration changes to prevent the exploit might be impractical and will vary between sites. Therefore, we recommend...

USN-4773-1: Drupal vulnerabilities

It was discovered that Drupal did not properly process certain input. An attacker could use this vulnerability to execute arbitrary code or completely compromise a Drupal site. CVE-2018-7600, CVE-2018-7602 It was discovered that password reset URLs in Drupal could be forged. An attacker could use...

Debian: Security Advisory (DLA-2530-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2530-1 : drupal7 security update

Drupal identified a vulnerability in the verson of the ArchiveTar library it bundles CVE-2020-36193, which allows out-of-path extraction vulnerabilities, granting it the Drupal Security Advisory ID SA-CORE-2021-001 : https://www.drupal.org/sa-core-2021-001 For Debian 9 'Stretch', the fix to this...

[SECURITY] [DLA-2530-1] drupal7 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2530-1 [email protected] https://www.debian.org/lts/security/ Gunnar Wolf January 21, 2021 https://wiki.debian.org/LTS -...

Fedora 32 : drupal7 (2020-088196d926)

https://www.drupal.org/project/drupal/releases/7.74 - https://www.drupal.org/sa-core-2020-012 - https://www.drupal.org/project/drupal/releases/7.73 - https://www.drupal.org/sa-core-2020-007 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 33 : drupal7 (2020-7d8f772540)

https://www.drupal.org/project/drupal/releases/7.74 - https://www.drupal.org/sa-core-2020-012 - https://www.drupal.org/project/drupal/releases/7.73 - https://www.drupal.org/sa-core-2020-007 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Debian: Security Advisory (DLA-2466-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2466-1] drupal7 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2466-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 27, 2020 https://wiki.debian.org/LTS -...

Fedora: Security Advisory for drupal7 (FEDORA-2020-7d8f772540)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for drupal7 (FEDORA-2020-088196d926)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...