Several security issues were fixed in Drupal.
Software Description:
- drupal7: fully-featured content management framework
Details:
It was discovered that Drupal incorrectly parsed untrusted HTML. A
remote attacker could possibly use this issue to execute arbitrary code.
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 16.04 LTS
drupal7 7.44-1ubuntu1~16.04.0+esm3
Available with Ubuntu Pro
Ubuntu 14.04 LTS
drupal7 7.26-1ubuntu0.1+esm3
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.https://ubuntu.com/security/notices/USN-7658-1
CVE-2020-11022, CVE-2020-11023
Get the latest Linux and open source security news straight to your inbox.