Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 23: drupal6-emfield Update - Moderate Access Bypass Issue

### 6.x-2.7 Fixes [Embedded Media Field - Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2016-004]() #### Changes since 6.x-2.6: * by dalin: Ensure that width and height are always numbers. * \#1868588 by tangent: URL detection regex does not match hyphens / breaks HTML markup. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-592f23fb74 2016-03-19 22:17:41.316479 -------------------------------------------------------------------------------- Name : drupal6-emfield Product : Fedora 23 Version : 2.7 Release : 1.fc23 URL : Summary : An engine for modules to integrate various 3rd party media content providersDescription : This extensible module will create fields for content types that can be used to display video, image, and audio files from various third party providers. When entering the content, the user will simply paste the URL or embed code from the third party, and the module will automatically determine which content provider is being used. When displaying the content, the proper embedding format will be used. The module is only an engine, and requires a supported module to function. These include 'Embedded Image Field', 'Embedded Video Field' and 'Embedded Audio Field'. These modules are included in the contrib folder of the module, so they can be easily activated from the module administration page. Please note: As of emfield 2.x, provider files for these modules are no longer included with the main emfield module, and must be downloaded separately. This package provides the following Drupal modules: * emaudio * embonus * emfield * emimage * eminline * emthumb * emvideo * emwave -------------------------------------------------------------------------------- Update Information: ### 6.x-2.7 Fixes [Embedded Media Field - Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2016-004]() #### Changes since 6.x-2.6: * by dalin: Ensure that width and height are always numbers.* \#1868588 by tangent: URL detection regex does not match hyphens / breaks HTML markup -------------------------------------------------------------------------------- References: [ 1 ] Bug #1306475 - drupal6-emfield-2.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=1306475 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update drupal6-emfield' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . This patch rectifies a vulnerability in media6-asset for Fedora 23, reinforcing defenses against unauthorized content interactions.. Drupal6 Integration, Media Content Security, Fedora Update Notice. . LinuxSecurity.com Team

Mar 20, 2016 Fedora