Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 38 Drupal7 2023-F4D22F8A92 Critical: File Download Sanitation

- [7.98]() - [7.97]() - [7.96]() - [SA- CORE-2023-005]() - [7.95]() - [SA-. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-f4d22f8a92 2023-10-04 15:50:14.488586 -------------------------------------------------------------------------------- Name : drupal7 Product : Fedora 38 Version : 7.98 Release : 1.fc38 URL : Summary : An open-source content-management platform Description : Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure. -------------------------------------------------------------------------------- Update Information: - [7.98]() - [7.97]() - [7.96]() - [SA- CORE-2023-005]() - [7.95]() - [SA- CORE-2023-004]() - [7.94]() - [7.93]() -------------------------------------------------------------------------------- ChangeLog: * Tue Sep 26 2023 Shawn Iwinski - 7.98-1 - Update to 7.98 (RHBZ #2217253) - SA-CORE-2023-004 - SA-CORE-2023-005 (RHBZ #2188106, 2188107, 2188108) * Wed Jul 19 2023 Fedora Release Engineering - 7.92-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2188107 - drupal7: drupal: File download facility doesn't sufficiently sanitize file paths [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2188107 [ 2 ] Bug #2188108 - drupal7: drupal: File download facility doesn't sufficiently sanitize file paths [epel-7] https://bugzilla.redhat.com/show_bug.cgi?id=2188108 [ 3 ] Bug #2217253 - drupal7-7.98 is available https://bugzilla.redhat.com/show_bug.cgi?id=2217253 -------------------------------------------------------------------------------- This update can beinstalled with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-f4d22f8a92' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora 38 releases drupal7 update addressing vital file validation flaw in version 7.98 to bolster security.. drupal update, fedora security, content management system, file sanitation, open source software. . Severity: Critical. LinuxSecurity.com Team

Oct 04, 2023 •Critical Fedora