MGASA-2016-0413
- Source
- https://advisories.mageia.org/MGASA-2016-0413.html
- Import Source
- https://advisories.mageia.org/MGASA-2016-0413.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2016-0413
- Related
- Published
- 2016-12-07T11:48:35Z
- Modified
- 2016-12-07T11:38:23Z
- Summary
- Updated drupal packages fix security vulnerability
- Details
-
Inconsistent name for term access query; information on taxonomy terms might have been disclosed to unprivileged users (CVE-2016-9449).
Confirmation forms allow external URLs to be injected (CVE-2016-9451).
- References
-
- https://advisories.mageia.org/MGASA-2016-0413.html
- https://bugs.mageia.org/show_bug.cgi?id=19812
- https://www.drupal.org/SA-CORE-2016-005
- https://www.drupal.org/drupal-7.45
- https://www.drupal.org/drupal-7.45-release-notes
- https://www.drupal.org/drupal-7.46
- https://www.drupal.org/drupal-7.46-release-notes
- https://www.drupal.org/drupal-7.47
- https://www.drupal.org/drupal-7.47-release-notes
- https://www.drupal.org/drupal-7.48
- https://www.drupal.org/drupal-7.48-release-notes
- https://www.drupal.org/drupal-7.49
- https://www.drupal.org/drupal-7.49-release-notes
- https://www.drupal.org/drupal-7.50
- https://www.drupal.org/drupal-7.50-release-notes
- https://www.drupal.org/drupal-7.51
- https://www.drupal.org/drupal-7.51-release-notes
- https://www.drupal.org/drupal-7.52
- https://www.drupal.org/drupal-7.52-release-notes
- http://openwall.com/lists/oss-security/2016/11/18/16
- https://lwn.net/Vulnerabilities/707038/
- https://lwn.net/Vulnerabilities/707041/
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:5 / drupal
Package
- Name
- drupal
- Purl
- pkg:rpm/mageia/drupal?distro=mageia-5