Package        : drupal7
Version        : 7.32-1+deb8u13
Debian Bugs    : #911336 #911337

It was discovered that there was a remote code execution and an
external URL injection vulnerability in the Drupal content
management framework.

For more information, please see:

  https://www.drupal.org/sa-core-2018-006

For Debian 8 "Jessie", these issues have been fixed in drupal7
version 7.32-1+deb8u13.

We recommend that you upgrade your drupal7 packages.


Regards,

- -- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Debian LTS: DLA-1550-1: drupal7 security update

October 19, 2018
It was discovered that there was a remote code execution and an external URL injection vulnerability in the Drupal content management framework

Summary

https://www.drupal.org/sa-core-2018-006

For Debian 8 "Jessie", these issues have been fixed in drupal7
version 7.32-1+deb8u13.

We recommend that you upgrade your drupal7 packages.


Regards,

- --
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-



Severity
Package : drupal7
Version : 7.32-1+deb8u13

Related News