It was discovered that incomplete validation in a Phar processing library embedded in Drupal, a fully-featured content management framework, could result in information disclosure.

For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2019-007.

-     [3.1.1](https://github.com/TYPO3/phar-stream-wrapper/rel     eases/tag/v3.1.1)

  -     [TYPO3-PSA-2019-007](https://typo3.org/security/advisory     /typo3-psa-2019-007/) /     [CVE-2019-11831](https://nvd.nist.gov/vuln/detail/CVE-20     19-11831)

  -     [TYPO3-PSA-2019-008](https://typo3.org/security/advisory     /typo3-psa-2019-008/) /     [CVE-2019-11830](https://nvd.nist.gov/vuln/detail/CVE-20     19-11830)

  -     [3.1.0](https://github.com/TYPO3/phar-stream-wrapper/rel     eases/tag/v3.1.0)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Two security updates have been released for PharStreamWrapper.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several security vulnerabilities have been discovered in drupal7, a PHP website platform. The vulnerabilities affect the embedded versions of the jQuery JavaScript library and the Typo3 Phar Stream Wrapper library.

CVE-2019-11358

It was discovered that the jQuery version embedded in Drupal was prone to a cross site scripting vulnerability in jQuery.extend().

For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2019-006.

CVE-2019-11831

It was discovered that incomplete validation in a Phar processing library embedded in Drupal, a fully-featured content management framework, could result in information disclosure.

For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2019-007.

For Debian 8 'Jessie', these problems have been fixed in version 7.32-1+deb8u17.

We recommend that you upgrade your drupal7 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
125096	Debian DSA-4445-1 : drupal7 - security update	Nessus	Debian Local Security Checks	2019/5/15	2024/5/22	critical
125231	Fedora 28 : php-typo3-phar-stream-wrapper (2019-4d93cf2b34)	Nessus	Fedora Local Security Checks	2019/5/17	2024/5/22	critical
126265	Fedora 30 : php-brumann-polyfill-unserialize / php-typo3-phar-stream-wrapper2 (2019-a8121923d5)	Nessus	Fedora Local Security Checks	2019/6/27	2024/5/14	critical
125230	Fedora 30 : php-typo3-phar-stream-wrapper (2019-3c89837025)	Nessus	Fedora Local Security Checks	2019/5/17	2024/5/22	critical
125298	Debian DLA-1797-1 : drupal7 security update	Nessus	Debian Local Security Checks	2019/5/21	2024/5/21	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical