Upgrade GovCMS D7 SaaS to version 7.x-1.17.0
Scheduled Maintenance Report for GovCMS
Completed
The scheduled maintenance has been completed.
Posted Nov 30, 2020 - 11:05 AEDT
In progress
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Posted Nov 25, 2020 - 18:00 AEDT
Scheduled
The latest GovCMS Drupal 7 (D7) distribution update has been released on 24 November 2020, and will be deployed to all GovCMS D7 SaaS sites on Wednesday 25 November 2020 from 6pm and running through to 8am the following morning.

No outages are expected to websites during the deployment process.

Drupal Security Advisory

Drupal core and Media oEmbed do not properly sanitise certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP for certain hosting configurations.
See:
* https://www.drupal.org/sa-core-2020-012
* https://www.drupal.org/sa-contrib-2020-036

What is included in the update?

This release contains:
* Update Drupal Core from 7.73 to 7.74
* Update Media: oEmbed from 2.7 to 2.8

What must my organisation do now?

SaaS customers need to check their site after the deployment to ensure there aren’t any issues. If you have any concerns, create a GovCMS Service Desk ticket at https://www.govcms.support.
PaaS customers should review the detailed information about this update, and apply updates as needed.
If you use the GovCMS distribution you should apply this version as soon as possible.
If you manage your own distribution you should complete an assessment of these issues with the aim to apply updates as soon as possible.

For customers utilising the GovCMS distribution outside the SaaS platform, this version has been released to:
GitHub
https://github.com/govCMS/GovCMS7/releases/tag/7.x-3.17

Drupal.org
https://www.drupal.org/project/govcms/releases/7.x-3.17

More information

If you have any concerns, raise a ticket at https://www.govcms.support
Posted Nov 24, 2020 - 17:13 AEDT
This scheduled maintenance affected: GovCMS Projects (Individual websites).