drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen beliebiger Kommandos in drupal7
Name: |
Ausführen beliebiger Kommandos in drupal7 |
|
ID: |
DSA-3051-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian sid, Debian wheezy |
|
Datum: |
Mi, 15. Oktober 2014, 21:00 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3704 |
|
Applikationen: |
Drupal |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
- ------------------------------------------------------------------------- Debian Security Advisory DSA-3051-1 security@debian.org http://www.debian.org/security/ Moritz Muehlenhoff October 15, 2014 http://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : drupal7 CVE ID : CVE-2014-3704
Stefan Horst discovered a vulnerability in the Drupal database abstraction API, which may result in SQL injection.
For the stable distribution (wheezy), this problem has been fixed in version 7.14-2+deb7u7.
For the unstable distribution (sid), this problem has been fixed in version 7.32-1.
We recommend that you upgrade your drupal7 packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBAgAGBQJUPr6CAAoJEBDCk7bDfE4234sP/3DpDnhz7KBXfzsT9U/Sn+kC hQMwFaurUZshmXmS4zkvCsoFnGryDYlaXmB5nDo4piODxPVNwe0Ea01l5o6XCi5/ CJlFPfC6ev+EBjUr2bDqjdFuIQnxOE3Kj3Dc6HkQnBdz6DmeeSLO/h02ESQ+q6N7 q5YgbBhAdhQvn5rC+gC3vlLh3UpIS/GN+SaSLZiPwl5nDRmQHFSEJi27X3i1IVsv bbKkhz5Tar9SFTOODoOHi07ujVg8hGY8bHGoviippOXQmnevRjTR70mXRlkAIS5L FEsajTEQeLYJHg8sREwl2btBmsIsGun1rrvNEE4IK3eV9evFh5Cad/Be5b+x7xZW crqD2psllabcRcYQGDdxkj/3CYtZbdZzmZx8zU+VO7BwFFcaTftsoNTxv8Jq0/U1 BdTy6zZ+liGJT1aCKyKeW4NDfGaw+wK62JY7XPT/eGxBXKE0U8anE3vsb3l4tpjh bMLsZWsXdPNcqFujzY02niTm6W7keRxPruhZrtNI5F2JmNUQT9pS3cEVQNFDj2IE ZFlWJztKIDM2z3jh4em41Thtd2ddeT+KNInRp9OysqZCkbGj/WemSk1RI3cff8P2 piFvAV79TnYaNUx3fG22FerLXwLWetfeaUmEfmGCWe0YwYJa2AjcReQ0wpEvtJUU 6n7hTUBNFU437lS29jCd =c5tm -----END PGP SIGNATURE-----
-- To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: https://lists.debian.org/20141015183732.GA2924@pisco.westfalen.local
|
|
|
|