[SECURITY] Fedora 30 Update: drupal7-webform-4.21-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-6abe00cae1
2020-01-04 22:13:43.235981
--------------------------------------------------------------------------------
Name : drupal7-webform
Product : Fedora 30
Version : 4.21
Release : 1.fc30
URL : https://drupal.org/project/webform
Summary : Enables the creation of forms and questionnaires
Description :
Webform is the module for making forms and surveys in Drupal. After a
submission, users may be sent an e-mail "receipt" as well as sending a
notification to administrators. Results can be exported into Excel or
other spreadsheet applications. Webform also provides some basic statistical
review and has an extensive API for expanding its features.
Some good examples could be contests, personalized contact forms, or petitions.
Each of these could have a customized form for end-users to fill out. If you
need to build a lot of customized, one-off forms, Webform is a more suitable
solution than creating content types and using CCK or Field module. Explanation
of Webform vs. CCK (or Fields) [1].
This package provides the following Drupal 7 module:
* webform
[1] http://drupal.org/documentation/modules/webform#webform-vs-cck
--------------------------------------------------------------------------------
Update Information:
- https://www.drupal.org/project/webform/releases/7.x-4.21 -
https://www.drupal.org/sa-contrib-2019-096 -
https://www.drupal.org/project/webform/releases/7.x-4.20
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 15 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 4.21-1
- Update to 4.21 (RHBZ #1742293, SA-CONTRIB-2019-096)
- https://www.drupal.org/sa-contrib-2019-096
- Add .info file to repo
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 4.19-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri May 24 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 4.19-1
- Updated to 4.19 (RHBZ #1503365)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1742293 - drupal7-webform-4.21 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1742293
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-6abe00cae1' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 4 months
Fedora 30 Update: drupal7-entity_translation-1.1-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-b401899231
2020-01-04 22:13:43.235950
--------------------------------------------------------------------------------
Name : drupal7-entity_translation
Product : Fedora 30
Version : 1.1
Release : 1.fc30
URL : https://drupal.org/project/entity_translation
Summary : Allows entities to be translated into different languages
Description :
Allows (fieldable) entities to be translated into different languages,
by introducing entity/field translation for the new translatable fields
capability in Drupal 7. Maintained by the Drupal core i18n team.
This project does not replace the Internationalization
(http://drupal.org/project/i18n) project, which focuses on enabling a full
multilingual workflow for site admins/builders. Some features, e.g. content
language negotiation or taxonomy translation, might overlap but most of them
are unrelated.
This package provides the following Drupal modules:
* entity_translation
* entity_translation_i18n_menu (requires install of drupal7-i18n)
* entity_translation_upgrade
--------------------------------------------------------------------------------
Update Information:
- https://www.drupal.org/project/entity_translation/releases/7.x-1.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 15 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.1-1
- Update to 1.1 (RHBZ #1776035)
- Add .info files to repo
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Thu May 23 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.0-1
- Update to 1.0 (RHBZ #1558957)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1776035 - drupal7-entity_translation-1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1776035
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-b401899231' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 4 months
Fedora 30 Update: drupal7-honeypot-1.26-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-9a421a15b4
2020-01-04 22:13:43.235935
--------------------------------------------------------------------------------
Name : drupal7-honeypot
Product : Fedora 30
Version : 1.26
Release : 1.fc30
URL : https://drupal.org/project/honeypot
Summary : Mitigates spam form submissions using the honeypot method
Description :
Honeypot uses both the honeypot and timestamp methods of deterring spam bots
from completing forms on your Drupal site (read more here). These methods are
effective against many spam bots, and are not as intrusive as CAPTCHAs or other
methods which punish the user [YouTube].
The module currently supports enabling for all forms on the site, or particular
forms like user registration or password reset forms, webforms, contact forms,
node forms, and comment forms.
This package provides the following Drupal module:
* honeypot
--------------------------------------------------------------------------------
Update Information:
- https://www.drupal.org/project/honeypot/releases/7.x-1.26
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 15 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.26-1
- Update to 1.26 (RHBZ #1783577)
- Add .info file to repo
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.25-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri May 24 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.25-1
- Update to 1.25 (RHBZ #1533285)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1783577 - drupal7-honeypot-1.26 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1783577
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-9a421a15b4' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 4 months
Fedora 30 Update: drupal7-file_entity-2.27-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-a13cbc6e7f
2020-01-04 22:13:43.235922
--------------------------------------------------------------------------------
Name : drupal7-file_entity
Product : Fedora 30
Version : 2.27
Release : 1.fc30
URL : https://drupal.org/project/file_entity
Summary : File entity (fieldable files)
Description :
File entity provides interfaces for managing files. It also extends the core
file entity, allowing files to be fieldable, grouped into types, viewed (using
display modes) and formatted using field formatters. File entity integrates
with a number of modules, exposing files to Views, Entity API, Token and more.
This package provides the following Drupal module:
* file_entity
--------------------------------------------------------------------------------
Update Information:
- https://www.drupal.org/project/file_entity/releases/7.x-2.27 -
https://www.drupal.org/project/file_entity/releases/7.x-2.26
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 15 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 2.27-1
- Update to 2.27
- Add .info files to repo
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 2.25-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Fri May 24 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 2.25-1
- Updated to 2.25 (RHBZ #1532086)
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-a13cbc6e7f' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 4 months
Fedora 30 Update: drupal7-link-1.7-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-226e5c27be
2020-01-04 22:13:43.235907
--------------------------------------------------------------------------------
Name : drupal7-link
Product : Fedora 30
Version : 1.7
Release : 1.fc30
URL : https://drupal.org/project/link
Summary : Defines simple link field types
Description :
The link module can be count to the top 50 modules in Drupal installations and
provides a standard custom content field for links. With this module links can
be added easily to any content types and profiles and include advanced
validating and different ways of storing internal or external links and URLs.
It also supports additional link text title, site wide tokens for titles and
title attributes, target attributes, CSS class attribution, static repeating
values, input conversion, and many more.
This package provides the following Drupal module:
* link
--------------------------------------------------------------------------------
Update Information:
- https://www.drupal.org/project/link/releases/7.x-1.7
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 15 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.7-1
- Update to 1.7 (RHBZ #1772459)
- Add .info file to repo
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.6-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1772459 - drupal7-link-1.7 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1772459
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-226e5c27be' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 4 months
Fedora 30 Update: drupal7-field_permissions-1.1-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-f20c427d53
2020-01-04 22:13:43.235893
--------------------------------------------------------------------------------
Name : drupal7-field_permissions
Product : Fedora 30
Version : 1.1
Release : 1.fc30
URL : https://drupal.org/project/field_permissions
Summary : Set field-level permissions to create, update or view fields
Description :
The Field Permissions module allows site administrators to set field-level
permissions to edit, view and create fields on any entity.
Features:
- Enable field permissions on any entity, not just nodes.
- Role-based field permissions allowing different viewing patterned based on
what access the user has.
- Author-level permissions allow viewing and editing of fields based on who
the entity owner is.
- Permissions for each field are not enabled by default. Instead,
administrators can enable these permissions explicitly for the fields
where this feature is needed.
- Field permissions overview
This package provides the following Drupal module:
* field_permissions
--------------------------------------------------------------------------------
Update Information:
- https://www.drupal.org/project/field_permissions/releases/7.x-1.1
--------------------------------------------------------------------------------
ChangeLog:
* Sun Dec 15 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 1.1-1
- Update to 1.1 (RHBZ #1758348)
- Add .info file to repo
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.0-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1758348 - drupal7-field_permissions-1.1 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1758348
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-f20c427d53' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 4 months
[SECURITY] Fedora 30 Update: drupal7-7.69-1.fc30
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-5f1a2cc839
2020-01-04 22:13:43.235847
--------------------------------------------------------------------------------
Name : drupal7
Product : Fedora 30
Version : 7.69
Release : 1.fc30
URL : https://www.drupal.org
Summary : An open-source content-management platform
Description :
Equipped with a powerful blend of features, Drupal is a Content Management
System written in PHP that can support a variety of websites ranging from
personal weblogs to large community-driven websites. Drupal is highly
configurable, skinnable, and secure.
--------------------------------------------------------------------------------
Update Information:
RPM notes: - All docs are now in `/usr/share/doc/drupal7/` - All licenses are
now in `/usr/share/licenses/drupal7/` - Requires have been updated to include
all [phpcompatinfo](http://php5.laurent-laville.org/compatinfo/) extension
findings ### 7.69 Maintenance and security release of the Drupal 7 series.
This release fixes **security vulnerabilities**. Sites are **[urged to upgrade
immediately](https://www.drupal.org/docs/7/update/introduction)** after reading
the notes below and the security announcement: - [Drupal core - Critical -
Multiple vulnerabilities - SA-CORE-2019-012](https://www.drupal.org/sa-
core-2019-012) No other fixes are included. #### Important update information
- Drupal 7 includes a bundled version of the pear/archive_tar project, the
included version has been updated from 1.4.5 to 1.4.9 in order to mitigate
[Drupal core - Critical - Multiple vulnerabilities - SA-
CORE-2019-012](https://www.drupal.org/sa-core-2019-012) No changes have been
made to the `.htaccess`, `web.config`, `robots.txt`, or default `settings.php`
files in this release, so upgrading custom versions of those files is not
necessary. ### 7.68 Maintenance release of the Drupal 7 series. Includes bug
fixes and small API/feature improvements only (no major, non-backwards-
compatible new functionality). No security fixes are included in this release.
**This is the first release to fully support PHP 7.3. Please test and report any
bugs in the issue queue.** No changes have been made to robots.txt in this
release, so upgrading custom versions of that file is not necessary. However,
changes have been made to .htaccess, web.config and
sites/default/default.settings.php in this release. The .htaccess and
web.config changes are detailed in this Change Record: - Access to web.config
is blocked in .htaccess (and vice-versa): https://www.drupal.org/node/3098687
Upgrading custom versions of .htaccess and web.config to incorporate this change
is recommended, but not required. There is one change to the
sites/default/default.settings.php file in this release, but the only change is
to file permissions: - [Regression] Fix default.settings.php permission:
https://www.drupal.org/node/3035772 #### Major changes since 7.67 - Fully
support PHP 7.3 - drupal_http_request() accepts data as an array in Drupal 7 -
Access to web.config is blocked in .htaccess (and vice-versa) - New "scripts"
element - theme_table() takes an optional footer variable and produces <tfoot>
#### All changes since 7.67 - \#3098664 by mcdruid: drupal_http_build_query()
only accepts arrays (followup to #3059391) - \#3097342 by mcdruid, Fabianx:
Prepare Drupal 7.68 (CHANGELOG.txt) - \#3088938 by DamienMcKenna, webchick,
mcdruid: Update the D7 maintainers list - \#2902430 by stefanos.petrakis,
joseph.olstad, SergFromSD, kiamlaluno, Ayesh, mcdruid, alexpott: [PHP 7.1] A
non-numeric value encountered in theme_pager() - \#2472025 by stupiddingo,
stefanos.petrakis: [D7] Hide toolbar when printing - \#2171113 by Pol, wiifm,
mw4ll4c3, David_Rothstein, douggreen, Fabianx: Settings returned via ajax are
not run through hook_js_alter() - \#3059391 by Liam Morland: Use
drupal_http_build_query() in drupal_http_request() - \#2966335 by mcdruid,
dvandijk, David_Rothstein: Avoid DrupalRequestSanitizer not found fatal error
when bootstrap phase order is changed - \#3025335 by mcdruid, mfb,
joseph.olstad, Fabianx, kiamlaluno, Pol: [PHP 7.3] Cannot change session id when
session is active - \#3055805 by mcdruid, greggles, Ayesh, Darren Oh,
David_Rothstein, sidharrell, pwolanin, mkalkbrenner, Sweetchuck, YesCT: file.inc
generated .htaccess does not cover PHP 7 - \#3047412 by mcdruid, Chi, beckydev,
DKAN, alexpott, sammuell, rabbitlair, longwave, greggles, interX: Block
web.config in .htaccess (and vice-versa) - \#3047844 by mfb, jordanwood,
Taran2L: Fix test failures on PHP 5.3 - \#3088557: Add mcdruid as provisional
Drupal 7 branch maintainer - \#3051370 by Pol, markcarver, Fabianx: Create
"scripts" element to align rendering workflow to how "styles" are handled -
\#2814031 by Liam Morland: In drupal_http_request(), allow passing data as array
- \#1861604 by hefox, joseph.olstad, Sivaji, mgifford, webchick: Skip
module_invoke/module_hook in calling hook_watchdog (excessive function_exist) -
\#2666908 by iamEAP, cilefen: HTTP status 200 returned for ���Additional uncaught
exception thrown while handling exception��� - \#1892654 by Pol, willvincent,
Fabianx: D7 Backport: theme_table() should take an optional footer variable and
produce - \#3009351 by Pol, mfb, BrianLP: [PHP ��� 7.2] "session_id(): Cannot
change session id" - \#2684337 by geoffray, Pol, jweowu, Fabianx: Warning:
uasort() expects parameter 1 to be array, null given in node_view_multiple() -
\#3035772 by Pol: [Regression] Fix default.settings.php permission
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 18 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.69-1
- Update to 7.69 (RHBZ #1784967 / SA-CORE-2019-012)
- https://www.drupal.org/sa-core-2019-012
* Mon Dec 16 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.68-2
- Fix ssh2 dependency (`php-ssh2` => `php-pecl(ssh2)`)
* Sat Dec 14 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.68-1
- Update to 7.68 (RHBZ #1779680)
- Use official drupal.org source
- Expand requires to include full phpcompatinfo findings
- Spec, docs, licenses, and %files revamp
* Sun Sep 15 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.67-3
- Use python3 for Fedora >= 29 and EPEL >= 8
* Wed Jul 24 2019 Fedora Release Engineering <releng(a)fedoraproject.org> - 7.67-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Wed May 15 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.67-1
- Update to 7.67 (RHBZ #1707958, #1708649, #1708652, #1708653)
- https://www.drupal.org/SA-CORE-2019-007 (CVE-2019-11831)
* Tue Apr 30 2019 Shawn Iwinski <shawn.iwinski(a)gmail.com> - 7.66-1
- Update to 7.66 (RHBZ #1701036, #1702424, #1702425, #1702620, #1702619)
- https://www.drupal.org/SA-CORE-2019-006 (CVE-2019-11358)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1779680 - drupal7-7.68 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1779680
[ 2 ] Bug #1784967 - drupal7-7.69 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1784967
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-5f1a2cc839' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
4 years, 4 months