Ubuntu alert USN-7658-1 (drupal7)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7658-1] Drupal vulnerabilities
Date:
             
 
Mon, 21 Jul 2025 13:54:59 +0000
Message-ID:
             
 
<E1udqyp-0007jb-Sr@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-7658-1
July 21, 2025

drupal7 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in Drupal.

Software Description:
- drupal7: fully-featured content management framework

Details:

It was discovered that Drupal incorrectly parsed untrusted HTML. A
remote attacker could possibly use this issue to execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
  drupal7                         7.44-1ubuntu1~16.04.0+esm3
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  drupal7                         7.26-1ubuntu0.1+esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7658-1
  CVE-2020-11022, CVE-2020-11023


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=6CPM
-----END PGP SIGNATURE-----