Просмотр новости
Найдите то, что Вас интересует
Спутники
РН
SpaceX
Роскосмос
NASA
СпутникиРНSpaceXРоскосмосNASAProject: Drupal coreDate: 2026-July-15Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:DefaultVulnerability: Cross-site scriptingAffected versions: <10.6.13 || >=11.3.0 <11.3.14 || >=11.4.0 <11.4.4 || 11.0.* || 11.1.* || 11.2.*CVE IDs: CVE-2026-55805Description: The Layout Builder module doesn't sufficiently sanitize block labels in certain scenarios, which can lead to a cross-site scripting (XSS) vulnerability.
This is mitigated by the fact that both the attacker and the targeted user need to be using the Layout Builder editing interface. Solution: Install the latest version:
Drupal 11
If you use Drupal 11.4.x, update to Drupal 11.4.4.
If you use Drupal 11.3.x, update to Drupal 11.3.14.
Drupal 11.2.x and below are end-of-life and do not receive security coverage.
Drupal 10
If you use Drupal 10.6.x, update to Drupal 10.6.13.
Drupal 10.5.x and below are end-of-life and do not receive security coverage.
Drupal 8 and Drupal 9 have both reached end-of-life.Reported By:
haii haii (hai27ii2o)
Fixed By:
danielveza
Lee Rowlands (larowlan) of the Drupal Security Team
Mingsong (mingsong) provisional member of the Drupal Security Team
James Gilliland (neclimdul) of the Drupal Security Team
Coordinated By:
Greg Knaddison (greggles) of the Drupal Security Team
Lee Rowlands (larowlan) of the Drupal Security Team
Dave Long (longwave) of the Drupal Security Team
Jess (xjm) of the Drupal Security Team
| # | Наименование новости | Тональность | Информативность | Дата публикации |
|---|---|---|---|---|
| 1 | Security advisories: Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-011 | 0 | 7 | 15-07-2026 |
| 2 | Security advisories: Drupal core - Moderately critical - Information disclosure - SA-CORE-2026-010 | 0 | 5 | 15-07-2026 |
| 3 | Drupal.org blog: Migrating issues from security.drupal.org to git.drupalcode.org | 5 | 7 | 17-07-2026 |
| 4 | Webpro Company blog: Drupal core July security updates: what site owners should check now | 0 | 7 | 16-07-2026 |
| 5 | EIP Editing Office Hour (EIP + ERC ) Meeting #108, July 28, 2026 | 0 | 18.32 | 27-07-2026 |
| 6 | After revolution slider update - not working on different languages | 0 | 7 | 13-07-2026 |
| 7 | Daily Hacker News for 2026-07-28 | 0 | 11.42 | 29-07-2026 |
| 8 | Tag1 Insights: A New Direction for Authentication in Drupal Core | 0 | 5 | 15-07-2026 |
| 9 | F-104 Starfighter and SR-71 Blackbird. First image colorized by @grok. The original is obviously… | 0 | 3 | 01-07-2026 |
| 10 | Parameter display conditions (hide element when empty) | 0 | 5 | 10-07-2026 |