FEDORA-2022-288e2fa22b
Packages in this update:
drupal7-context-3.11-1.fc35
Update description:
https://www.drupal.org/project/context/releases/7.x-3.11
SA-CONTRIB-2022-049
drupal7-context-3.11-1.fc35
https://www.drupal.org/project/context/releases/7.x-3.11
SA-CONTRIB-2022-049
drupal7-context-3.11-1.el7
https://www.drupal.org/project/context/releases/7.x-3.11
SA-CONTRIB-2022-049
drupal7-context-3.11-1.fc36
https://www.drupal.org/project/context/releases/7.x-3.11
SA-CONTRIB-2022-049
drupal7-context-3.11-1.fc37
https://www.drupal.org/project/context/releases/7.x-3.11
SA-CONTRIB-2022-049
drupal7-link-1.11-1.fc35
https://www.drupal.org/project/link/releases/7.x-1.11
SA-CONTRIB-2022-034
https://www.drupal.org/project/link/releases/7.x-1.10
https://www.drupal.org/project/link/releases/7.x-1.9
https://www.drupal.org/project/link/releases/7.x-1.8
drupal7-link-1.11-1.fc36
https://www.drupal.org/project/link/releases/7.x-1.11
SA-CONTRIB-2022-034
https://www.drupal.org/project/link/releases/7.x-1.10
https://www.drupal.org/project/link/releases/7.x-1.9
https://www.drupal.org/project/link/releases/7.x-1.8
drupal7-link-1.11-1.el7
https://www.drupal.org/project/link/releases/7.x-1.11
SA-CONTRIB-2022-034
https://www.drupal.org/project/link/releases/7.x-1.10
https://www.drupal.org/project/link/releases/7.x-1.9
https://www.drupal.org/project/link/releases/7.x-1.8
drupal7-link-1.11-1.fc37
https://www.drupal.org/project/link/releases/7.x-1.11
SA-CONTRIB-2022-034
https://www.drupal.org/project/link/releases/7.x-1.10
https://www.drupal.org/project/link/releases/7.x-1.9
https://www.drupal.org/project/link/releases/7.x-1.8
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.
In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.