MGASA-2014-0329
- Source
- https://advisories.mageia.org/MGASA-2014-0329.html
- Import Source
- https://advisories.mageia.org/MGASA-2014-0329.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2014-0329
- Published
- 2014-08-12T09:16:46Z
- Modified
- 2026-04-16T04:28:59.168221Z
- Summary
- Updated drupal packages fix security vulnerability
- Details
-
A denial of service issue exists in Drupal before 7.31, due to XML entity expansion in a publicly accessible XML-RPC endpoint.
The drupal package has been updated to version 7.31 to fix this issue and other bugs. See the upstream advisory and release notes for more details.
- References
-
- https://advisories.mageia.org/MGASA-2014-0329.html
- https://bugs.mageia.org/show_bug.cgi?id=13876
- https://www.debian.org/security/2014/dsa-2999
- https://www.drupal.org/SA-CORE-2014-004
- https://www.drupal.org/drupal-7.30
- https://www.drupal.org/drupal-7.30-release-notes
- https://www.drupal.org/drupal-7.31
- https://www.drupal.org/drupal-7.31-release-notes
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:3 / drupal
Package
- Name
- drupal
- Purl
- pkg:rpm/mageia/drupal?arch=source&distro=mageia-3
Mageia:4 / drupal
Package
- Name
- drupal
- Purl
- pkg:rpm/mageia/drupal?arch=source&distro=mageia-4