Debian 9: DLA-2637-1 Critical Threat From Drupal7 Sanitization Flaw
debian lts
April 23, 2021
The Drupal project identified a vulnerability in the sanitization performed in the _filter_xss_arttributes function, potentially allowing a cross-site scripting, and granted it the...
Topics Covered
Summary
https://
No CVE number has been announced.
For Debian 9 "Stretch", the fix to this issue was backported in
version 7.52-2+deb9u15.
We recommend you upgrade your drupal7 package.
For detailed security status of drupal7, please refer to its security
tracker page:
Further information about Debian LTS security advisories, how to
apply these updates to your system, and other frequently asked
questions can be found at:
https://wiki.debian.org/LTS
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!