In response to a recent moderately critical security advisory issued by Drupal.org. GovCMS assessed this risk as it applied to D9 distribution. Subsequently the security risk remained moderately critical.
GovCMS released the updated Drupal 9 (D9) distribution on 7 June 2021
. Deployment is scheduled to commence on Tuesday 8 June 2021.No outages are expected to websites during the deployment process.
What is included in the update?
This release contains:Drupal Core from 9.1.8 to 9.1.9
- https://github.com/govCMS/GovCMS/pull/221Context from 8.x-4.0-beta5 to 8.x-4.0-beta6
- https://github.com/govCMS/GovCMS/pull/219Media Entity File Replace from 8.x-1.0-beta3 to 8.x-1.0
- https://github.com/govCMS/GovCMS/pull/220Minor updates to login security, GovCMS bartik theme and dependabot
What does the update remove from the distribution?
Nothing will be removed from ANY of the distributions in this update.
What support will be provided after these update?
The D9 distribution will continue to be supported after this update.
What actions must my organisation do now? SaaS customers
All customers will need to check their site after the deployment to ensure there aren’t any issues.Important reminder for projects with configuration management enabled
Do not import any out of date configurations of these modules. This will cause fatal errors to your websites. Once the deployment is completed you will need to export the new configurations files and commit them back to master. Deployments to all websites should be completed by 6am Wednesday 9 June 2021, you can confirm this at https://status.govcms.support/PaaS customers
Review the detailed information about this update.
If you manage your own
distribution: the moderately critical issue should have been assessed within 7 days of the original notification.
If you use the GovCMS D9 distribution. You should aim to apply this update to your distribution as soon as possible.
Updated files were release on 7 June 2021 and are available from https://github.com/govCMS/GovCMS/releases/tag/2.1.0
If you have any concerns, raise a ticket at https://www.govcms.support
For information on updates to the GovCMS platform, subscribe to https://status.govcms.support/