- The latest GovCMS Drupal 7 (D7) distribution update has been released on 24 November 2020, and will be deployed to all GovCMS D7 SaaS sites on Wednesday 25 November 2020
from 6pm and running through to 8am the following morning.
No outages are expected to websites during the deployment process.
Drupal Security Advisory
Drupal core and Media oEmbed do not properly sanitise certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations.
What is included in the update?
This release contains:
* Update Drupal Core from 7.73 to 7.74
* Update Media: oEmbed from 2.7 to 2.8
What must my organisation do now?SaaS customers
need to check their site after the deployment to ensure there aren’t any issues. If you have any concerns, create a GovCMS Service Desk ticket at https://www.govcms.support
should review the detailed information about this update, and apply updates as needed.
If you use the GovCMS distribution you should apply this version as soon as possible.
If you manage your own distribution you should complete an assessment of these issues with the aim to apply updates as soon as possible.
For customers utilising the GovCMS distribution outside the SaaS platform, this version has been released to:GitHubhttps://github.com/govCMS/GovCMS7/releases/tag/7.x-3.17Drupal.orghttps://www.drupal.org/project/govcms/releases/7.x-3.17
If you have any concerns, raise a ticket at https://www.govcms.support