Debian alert DLA-2925-1 (drupal7)

From:
             
 
Gunnar Wolf <gwolf@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA-2925-1] drupal7 security update
Date:
             
 
Wed, 16 Feb 2022 13:00:02 -0600
Message-ID:
             
 
<Yg1JsiFmEy7Gg8+8@mosca.iiec.unam.mx>
Package        : drupal7
Version        : 7.52-2+deb9u18

This security updates includes two fixes, backported respectively from
Drupal version 7.87 and 7.88:

- Fix a regression caused by Query ui position() backport in version
  7.86 (backported as 7.52-2+deb9u17): was not checking for possible
  "undefined" value in options

- Fix improper input validation in Drupal's form API

Drupal is a dynamic web site platform which allows an individual or
community of users to publish, manage and organize a variety of
content.