West East Weekly

Project: Drupal core Date: 2024-January-17 Security risk: Moderately critical 11∕25 Vulnerability: Denial of Service Affected versions: >=8.0 =10.2

Project: Typogrify
Date: 2024-January-10
Security risk: Moderately critical 12∕25
Vulnerability: Cross Site Scripting
Affected versions: <1.3.0

Project: File Entity (fieldable files) Date: 2024-January-10 Security risk: Moderately critical 14∕25 Vulnerability: Cross Site Scripting, Access bypass

On November 1, 2023, Drupal 9 has officially reached its end of life.

Drupal 9 depends on several essential software components, including Symfony, CKEditor, and Twig. With the approaching end of life for Symfony 4, CKEditor 4, and Twig 2, Drupal 9 has now transitioned into its end-of-life phase. There will be no further Drupal 9 releases.

Before the end of January 2024, two important changes will take place in the Drupal contributed projects ecosystem. Firstly, the automated testing... Читать дальше...

Project: Entity cache Date: 2023-September-27 Security risk: Critical 16∕25 Vulnerability: Information disclosure

Project: Drupal core Date: 2023-September-20 Security risk: Critical 16∕25 Vulnerability: Cache poisoning Affected versions: >=8.7.0 =10.0 = 10.1

Project: Config Pages Version: 8.x-2.8, 8.x-2.7, 8.x-2.6, 8.x-2.5,8.x-2.4, 8.x-2.3, 8.x-2.2, 8.x-2.1, 8.x-2.0 Date: 2023-August-23 Security risk: Moderately critical 12∕25 Vulnerability: Information Disclosure Affected versions:

Project: ACL Date: 2023-August-23 Security risk: Critical 17∕25 Vulnerability: Arbitrary PHP code execution Affected versions:

Introduction

As technology continually evolves, so too must the software that powers our websites. Drupal, one of the leading content management systems (CMS), has announced the final extension of the end of life for Drupal 7 on January 5, 2025. This announcement has significant implications for website owners and administrators who are currently utilizing Drupal 7. In this article, we will explore what Drupal 7's end of life means, the potential risks of not transitioning, and essential... Читать дальше...

Project: AddToAny Share Buttons Date: 2023-May-31 Security risk: Moderately critical 13∕25 Vulnerability: Cross Site Scripting