Stay Secure with the Latest Linux Advisories

security advisoryFedoraupdate information

Fedora 21: SA-CONTRIB-2015-130 High: XSS Issue in Drupal7-Migrate

## 7.x-2.8 **See [SA-CONTRIB-2015-130](https://) **Features and enhancements** * Issue #2379289: migrate-import --update does not seem to work as expected, if map is not joinable, due to highwater field? * Issue #2403643: Migration::applyMappings() unable to handle multifield subfields. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-11314 2015-07-10 16:35:27 -------------------------------------------------------------------------------- Name : drupal7-migrate Product : Fedora 21 Version : 2.8 Release : 1.fc21 URL : https:// Summary : Import content from external sources Description : The migrate module provides a flexible framework for migrating content into Drupal from other sources (e.g., when converting a web site from another CMS to Drupal). Out-of-the-box, support for creating core Drupal objects such as nodes, users, files, terms, and comments are included - it can easily be extended for migrating other kinds of content. Content is imported and rolled back using a bundled web interface (Migrate UI module) or included Drush commands (strongly recommended [1]). This package provides the following Drupal modules: * migrate * migrate_example * migrate_example_baseball * migrate_example_oracle * migrate_ui [1] https:// -------------------------------------------------------------------------------- Update Information: ## 7.x-2.8 **See [SA-CONTRIB-2015-130](https://) **Features and enhancements** * Issue #2379289: migrate-import --update does not seem to work as expected, if map is not joinable, due to highwater field? * Issue #2403643: Migration::applyMappings() unable to handle multifield subfields * Issue #2472045: Add language subfields only if field is translatable * Issue #2474809: Obtuse error message when migration dependencies are missing * Issue #2397791: MigrationBase::handleException should handle multiple errors via field_attach_validate() * Issue #2309563: Add support forrunning migrations via wildcard name * Issue #2095841: Add MigrationBase methods to enable/disable mail system. * Issue #2419373: Performance improvement when using Source migrations in combination with MigrateSQLMap * Issue #2141687: Make error messages include more information when migrating files **Bug fixes** * Field sanitization added to prevent possibility of XSS - see security advisory https:// * Issue #2447115: Mapping editor does not properly save XML mappings * Issue #2497015: Remapping taxonomy terms breaks term reference import on dependant migrations * Issue #2488560: MigrateSourceList and MigrateSourceMultiItems getNextRow() stops after only one iteration * Issue #2446105: Source fields getting reset as "do not migrate" after mapping and saving * Issue #2415977: /tmp is hard-coded in migrate_ui * Issue #2475473: Drush idlist option broken * Issue #2465387: Unknown option: --stop during migrate-import via Drush **Important: If you are upgrading from Migrate 2.5 or earlier** Migration developers will need to add the "advanced migration information" permission to their roles to continue seeing all the info in the UI they're used to. Auto-registration (having classes be registered just based on their class name, with no call to registerMigration or definition in hook_migrate_api()) is no longer supported. Registration of classes defined in hook_migrate_api() is no longer automatic - do a drush migrate-register or use the Register button in the UI to register them. Migration class constructors should now always accept an $arguments array as the first parameter and pass it to its parent. This version does support legacy migrations which pass a group object, or nothing, but these methods are deprecated. -------------------------------------------------------------------------------- ChangeLog: * Mon Jul 6 2015 Shawn Iwinski 2.8-1 - Updated to 2.8 (RHBZ #1238486) - Keep documentation where end-users expect it * Wed Jun 17 2015 Fedora Release Engineering - 2.7-2 - Rebuiltfor https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Fri Feb 27 2015 Shawn Iwinski - 2.7-1 - Updated to 2.7 (BZ #1191439) - Removed RPM README b/c it only explained common Drupal workflow - %license usage - Spec cleanup -------------------------------------------------------------------------------- References: [ 1 ] Bug #1238486 - drupal7-migrate-2.8 is available https://bugzilla.redhat.com/show_bug.cgi?id=1238486 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update drupal7-migrate' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Fedora 22 drupal8-migrate enhancement tackles XSS vulnerabilities and refines migration capabilities. Crucial for users transitioning.. drupal7-migrate Update, Fedora 21 Security Enhancements, Migration Framework Updates. . LinuxSecurity.com Team

Jul 19, 2015 Fedora