Fedora 38 Drupal7 2023-F4D22F8A92 Critical: File Download Sanitation
fedora
October 4, 2023
- [7.98]() - [7.97]() - [7.96]() - [SA- CORE-2023-005]() - [7.95]() - [SA-
Summary
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
Update Information:
- [7.98]() - [7.97]() - [7.96]() - [SA- CORE-2023-005]() - [7.95]() - [SA- CORE-2023-004]() - [7.94]() - [7.93]()
Topics Covered
Change Log
* Tue Sep 26 2023 Shawn Iwinski
References
[ 1 ] Bug #2188107 - drupal7: drupal: File download facility doesn't sufficiently sanitize file paths [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2188107
[ 2 ] Bug #2188108 - drupal7: drupal: File download facility doesn't sufficiently sanitize file paths [epel-7]
https://bugzilla.redhat.com/show_bug.cgi?id=2188108
[ 3 ] Bug #2217253 - drupal7-7.98 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2217253
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-f4d22f8a92' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: drupal7
Product: Fedora 38
Version: 7.98
Release: 1.fc38
URL:
Summary: An open-source content-management platform
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!