Debian Security Advisory
DLA-1550-1 drupal7 -- LTS security update
- Date Reported:
- 19 Oct 2018
- Affected Packages:
- Security database references:
- No other external database security references currently available.
- More information:
It was discovered that there was a remote code execution and an external URL injection vulnerability in the Drupal content management framework.
For more information, please see:
For Debian 8
Jessie, these issues have been fixed in drupal7 version 7.32-1+deb8u13.
We recommend that you upgrade your drupal7 packages.