[SECURITY] [DLA-2637-1] drupal7 security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- -----------------------------------------------------------------------
Debian LTS Advisory DLA-2637-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Gunnar Wolf
April 23, 2021 https://wiki.debian.org/LTS
- -----------------------------------------------------------------------
Package : drupal7
Version : 7.52-2+deb9u15
The Drupal project identified a vulnerability in the sanitization
performed in the _filter_xss_arttributes function, potentially
allowing a cross-site scripting, and granted it the Drupal Security
Advisory ID SA-CORE-2021-002:
https://www.drupal.org/sa-core-2021-002
No CVE number has been announced.
For Debian 9 "Stretch", the fix to this issue was backported in
version 7.52-2+deb9u15.
We recommend you upgrade your drupal7 package.
For detailed security status of drupal7, please refer to its security
tracker page:
https://security-tracker.debian.org/tracker/source-package/drupal7
Further information about Debian LTS security advisories, how to
apply these updates to your system, and other frequently asked
questions can be found at:
https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
iHUEARYIAB0WIQRgswk9lhCOXLlxQu/i9jtDU/RZiQUCYIMubAAKCRDi9jtDU/RZ
iWn/AP40rhBJ+FJXOLacDMle2Sc0aLBjuP55OFhOVmWsSchm6AD+PgCg3zHyvOyj
7ZMI0BP3NiMAZAOMlXJpDIVwGINd9Qc=
=DPfS
-----END PGP SIGNATURE-----
Reply to: