Fedora Update for drupal7 FEDORA-2019-5f1a2cc839

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 30 : drupal7 (2019-5f1a2cc839)

RPM notes : - All docs are now in /usr/share/doc/drupal7/ - All licenses are now in /usr/share/licenses/drupal7/ - Requires have been updated to include all phpcompatinfo extension findings 7.69 Maintenance and security release of the Drupal 7 series. This release fixes security vulnerabilities...

Fedora 31 : drupal7 (2019-4917943339)

RPM notes : - All docs are now in /usr/share/doc/drupal7/ - All licenses are now in /usr/share/licenses/drupal7/ - Requires have been updated to include all phpcompatinfo extension findings 7.69 Maintenance and security release of the Drupal 7 series. This release fixes security vulnerabilities...

[SECURITY] Fedora 31 Update: drupal7-l10n_update-2.3-1.fc31

Automatically download and update your translations fetching them from localize.drupal.org 1 or any other localization server 2. This package provides the following Drupal module: l10nupdate 1 http://localize.drupal.org/ 2 http://drupal.org/project/l10nserver...

[SECURITY] Fedora 31 Update: drupal7-7.69-1.fc31

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[SECURITY] Fedora 30 Update: drupal7-webform-4.21-1.fc30

Webform is the module for making forms and surveys in Drupal. After a submission, users may be sent an e-mail "receipt" as well as sending a notification to administrators. Results can be exported into Excel or other spreadsheet applications. Webform also provides some basic statistical review an...

[SECURITY] Fedora 30 Update: drupal7-l10n_update-2.3-1.fc30

Automatically download and update your translations fetching them from localize.drupal.org 1 or any other localization server 2. This package provides the following Drupal module: l10nupdate 1 http://localize.drupal.org/ 2 http://drupal.org/project/l10nserver...

VulnCheck KEV: CVE-2019-6340

In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases...

Symlink Attack

drupal/drupal is vulnerable to symlink attacks. The application uses a third-party library ArchiveTar that allows symbolic links by default. When Drupal is configured to allow .tar, .tar.gz, .bz2 or .tlz file uploads, an attacker is able to upload compressed files containing malicious filenames...

Authorization Bypass

drupal/drupal is vulnerable to authorization bypass. Lack of restriction to media items in the Media Library allows an attacker to bypass authorization in specific configurations of Drupal...

Authorization Bypass

drupal/drupal is vulnerable to authorization bypass. The filesaveupload function does not strip the leading and trailing dot . characters from filenames. Any users with the ability to upload files with any extension in conjunction with contributed modules may be able to use this to upload system...

FreeBSD : drupal -- Drupal Core - Multiple Vulnerabilities (3da0352f-2397-11ea-966e-000ffec0b3e1)

Drupal Security Team reports : A visit to install.php can cause cached data to become corrupted. This could cause a site to be impaired until caches are rebuilt. Drupal 8 core's filesaveupload function does not strip the leading and trailing dot '.' from filenames, like Drupal 7 did. Users with t...

The vulnerability of the Phar utility in the Drupal CMS system allows a hacker to execute arbitrary code.

The vulnerability of the phar utility in the Drupal CMS system is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file with the .phar extension...

The vulnerability of the PEAR Archive_Tar library in the Drupal CMS system allows a hacker to execute arbitrary code.

The vulnerability of the PEAR ArchiveTar library in the Drupal CMS system is related to the restoration of a dubious data structure in memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Drupal 7.0.x < 7.69 / 8.7.x < 8.7.11 / 8.8.x < 8.8.1 Multiple Vulnerabilities (drupal-2019-12-18)

According to its self-reported version, the instance of Drupal running on the remote web server is 7.0.x prior to 7.69, 8.7.x prior to 8.7.11, or 8.8.x prior to 8.8.1. It is, therefore, affected by multiple vulnerabilities. - The Drupal project uses the third-party library ArchiveTar, which has...

Drupal Warns Web Admins to Update CMS Sites to Patch a Critical Flaw

If you haven't recently updated your Drupal-based blog or business website to the latest available versions, it's the time. Drupal development team yesterday released important security updates for its widely used open-source content management software that addresses a critical and three...

Drupal Warns Web Admins to Update CMS Sites to Patch a Critical Flaw

If you haven't recently updated your Drupal-based blog or business website to the latest available versions, it's the time. Drupal development team yesterday released important security updates for its widely used open-source content management software that addresses a critical and three...

Drupal Releases Security Updates

Drupal has released security updates to address vulnerabilities in Drupal 7.x, 8.7.x, and 8.8.x. An attacker could exploit some of these vulnerabilities to modify data on an affected website. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review t...

Drupal 8.x Multiple Vulnerabilities (SA-CORE-2019-009, SA-CORE-2019-010, SA-CORE-2019-011) - Linux

Drupal is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; ifdescription...

Drupal 7.x and 8.x Multiple Vulnerabilities (SA-CORE-2019-012) - Linux

Drupal is prone to multiple vulnerabilities in the third-party library ArchiveTar. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...