--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2019-67b3f85ea0
2019-03-12 21:47:35.522821
--------------------------------------------------------------------------------
Name : drupal6
Product : Fedora EPEL 6
Version : 6.38
Release : 2.el6
URL :
http://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
Apply [backported Drupal 7/8 security
patches](https://cgit.drupalcode.org/d6lts/tree/common/core) from [Drupal 6 LTS
program](https://www.drupal.org/project/d6lts) -
https://www.drupal.org/sa-
core-2018-001 -
https://www.drupal.org/sa-core-2018-002 -
https://www.drupal.org/sa-core-2018-004 -
https://www.drupal.org/sa-
core-2018-006 -
https://www.drupal.org/sa-core-2019-002
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1548323 - CVE-2017-6926 CVE-2017-6927 CVE-2017-6928 CVE-2017-6929
CVE-2017-6930 CVE-2017-6931 CVE-2017-6932 drupal: Multiple vulnerabilities fixed in 7.57
and 8.4.5 (SA-CORE-2018-001)
https://bugzilla.redhat.com/show_bug.cgi?id=1548323
[ 2 ] Bug #1548200 - drupal: External link injection on 404 pages when linking to the
current page
https://bugzilla.redhat.com/show_bug.cgi?id=1548200
[ 3 ] Bug #1548196 - drupal: jQuery vulnerability with untrusted domains requests via
Ajax
https://bugzilla.redhat.com/show_bug.cgi?id=1548196
[ 4 ] Bug #1548193 - drupal: Private file access bypass in Drupal private file system
https://bugzilla.redhat.com/show_bug.cgi?id=1548193
[ 5 ] Bug #1548189 - drupal: JavaScript cross-site scripting in checkPlain function
https://bugzilla.redhat.com/show_bug.cgi?id=1548189
[ 6 ] Bug #1548187 - drupal: Comment reply form allows access to restricted content
https://bugzilla.redhat.com/show_bug.cgi?id=1548187
[ 7 ] Bug #1643121 - drupal: Multiple Vulnerabilities - SA-CORE-2018-006
https://bugzilla.redhat.com/show_bug.cgi?id=1643121
[ 8 ] Bug #1561854 - CVE-2018-7600 drupal: Unsanitized requests allow remote attackers
to execute arbitrary code
https://bugzilla.redhat.com/show_bug.cgi?id=1561854
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update drupal6' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------