RELEASE VERSION 7.88
ADOA-ASET will be applying updates to all Agency Platform Websites according to the following schedule:
| Environment | Date | Time | status |
|---|---|---|---|
| DEV | February 17th, 2022 | 9:00 AM | |
| TEST | February 17, 2022 | 12:00 PM | |
| LIVE | February 17, 2022 | 5:00 PM |
- Service interruption is not expected.
- Please contact the ADOA Service Desk if you have any questions or concerns
Updates Include:
| Title | Version | Notes |
|---|---|---|
| Drupal Core | 7.88, 9.2.0.0.1 | Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter critical or sensitive data. |
|
Colorbox - Critical - Unsupported - SA-CONTRIB-2022-007 |
colorbox 7.x-2.16 |
This release resolves all known security issues. Note, colorbox_load is now restricted to internal Drupal paths only, and will not load external URLs. You can still use colorbox_inline with an iframe to load external content into a colorbox. |
