En

Drupal官网安全更新(2021-09-01)

来源:Drupal官网 发布日期:2021-09-01 阅读次数:5550 评论:0

基本信息

发布日期:2021-09-01(官方当地时间)

更新类型:安全更新

更新版本:9.2.5

感知时间:2021-09-02 06:36:48

风险等级:未知

情报贡献:TSRC

更新标题

drupal 9.2.5

更新详情

This is a patch (bugfix) release of Drupal 9 and is ready for use on production sites. Learn more about Drupal 9.

Drupal 9.2.x will receive security coverage until June 2022 when Drupal 9.4.0 is released.
If you are upgrading from Drupal 8, read upgrading a Drupal 8 site to Drupal 9, 9.0.0 release notes, and the 9.2.0 release notes before upgrading to this release.
Regardless of which version you choose now, features will only be added to Drupal 9 minor releases, so plan to adopt Drupal 9 as soon as possible so that you can easily update to Drupal 9.2 and later.
Known issues
Search the issue queue for known issues.
Changes since 9.2.4

Issue #3228634 by Spokje, xjm, paulocs, tim.plunkett, Lendude: Move tests for integrations between QuickEdit and other modules into QuickEdit so that it can more easily be moved into contrib
Revert "Issue #3228634 by Spokje, xjm, paulocs, tim.plunkett, Lendude: Move tests for integrations between QuickEdit and other modules into QuickEdit so that it can more easily be moved into contrib"
Issue #3228634 by Spokje, xjm, paulocs, tim.plunkett, Lendude: Move tests for integrations between QuickEdit and other modules into QuickEdit so that it can more easily be moved into contrib
Issue #3221748 by Dane Powell, longwave, alexpott: drupal/core is implicitly allowed by scaffold
Issue #3229012 by mlncn, wolcen: Fix copy-paste mistake in code comment
Issue #3228963 by el7cosmos: Wrong path for Exception message in ThemeExtensionList
Issue #3203416 by guilhermevp, joachim: docs for FormValidator::doValidateForm() should explain $form_id can detect recursion
Issue #3018091 by guilhermevp, vacho, shubhangi1995, joachim, longwave, wolffereast: TaggedHandlersPass::process() doesn't document some of its features
Revert "Issue #3022910 by quietone, juampynr, chandrashekhar_srijan, alisonjo315, heddn, benjifisher: Prevent migrated files from having an incorrect value at file_managed.filename"
Issue #3228656 by bradjones1, Spokje: Remove outdated @todo in HtmlResponseAttachmentsProcessor
Issue #3221715 by nod_, brianperry: Add brianperry as coordinator for the decoupled menus initiative
Issue #3212120 by kiran.kadam911, kostyashupenko, tushar_sachdeva, chetanbharambe, ranjith_kumar_k_u, mherchel, aaron.ferris: Blockquote's content font size should be decreased when it is placed into the sidebar in the Olivero theme
Issue #3226704 by mherchel, Abhijith S, lauriii, Gauravmahlawat, Indrajith KB: Olivero's top-level primary menu's hover states are not correct
Issue #3221871 by mherchel, Gauravmahlawat, W01F, nod_: Olivero: Mobile menu prevents scroll & obscures page after click if menu item contains link to anchor on same page
Issue #3223268 by javi-er, dhirendra.mishra, mherchel: Olivero: IE11 primary menu submenus have horizontal scrollbar when submenu item has focus
Issue #3227427 by mherchel, Gauravmahlawat: Olivero: focus state is invisible in Windows high contrast
Issue #3228396 by paul121: Update link to ChromeDriver site
Revert "Issue #3202145 by kuldeep_mehra27, phenaproxima, bkosborne, Chris Burge: oEmbed resource fetcher needs to set a reasonable connection timeout"
Issue #3228145 by Gauravmahlawat, mherchel: Remove misleading "toggle" phrase from Olivero's wide search form disclosure button
Issue #3218978 by effulgentsia, daffie, mcdruid, Wim Leers: MySQL driver allows settings.php to remove ANSI_QUOTES from sql_mode, but doesn't work when it is
Issue #3228237 by DamienMcKenna, quietone: Always sort tables in db-tools.php dump
Issue #3190070 by Spokje: Incorrect comment indentation in default.services.yml
Issue #3202145 by kuldeep_mehra27, phenaproxima, bkosborne, Chris Burge: oEmbed resource fetcher needs to set a reasonable connection timeout
Issue #3227945 by cilefen, Wim Leers: Remove bender-runner.config.json from CKEditor builds
Back to dev.
Merged 9.2.4.
Issue #3225188 by mherchel, dipakmdhrm, Gauravmahlawat, jwitkowski79: Olivero: Ensure proper visual hierarchy between headings
Issue #3022910 by quietone, juampynr, chandrashekhar_srijan, alisonjo315, heddn, benjifisher: Prevent migrated files from having an incorrect value at file_managed.filename
Issue #3220255 by Spokje, mondrake, longwave: Convert assertions involving use of xpath on links to WebAssert
Issue #3224466 by andy-blum, mherchel: Olivero: elements are not inheriting theme's font
Issue #3226008 by longwave, mondrake: Remove simple uses of t() in assertEquals() calls
Issue #3170396 by mondrake, ankithashetty, longwave, catch: [backport] Remove uses of t() and switch to pageTextContains() in assert(No)Raw() calls
Issue #3227060 by mondrake, ankithashetty, daffie, catch: [backport] Replace usages of AssertLegacyTrait::assertNoRaw, that is deprecated
Issue #2989893 by ankithashetty, srilakshmier, quietone, firfin, longwave: Remove redundant source: key in Substr example
Issue #2047119 by fago, msankhala, LinL: Remove deprecated documentation in DataType annotation
Issue #3191935 by mondrake, tedbow, paulocs, ankithashetty, longwave, xjm, catch, alexpott: Replace usages of AssertLegacyTrait::assertNoText, which is deprecated
Issue #3224414 by alexpott, varshith, dagmar, daffie: Installing the syslog module uses its configuration before it is written
Issue #3222616 by phenaproxima, vsujeetkumar, labboy0276, hmendes, cilefen: YouTube PlayLists can't be added to Remote Video due to regex issue
Issue #3063343 by phenaproxima, Wim Leers, larowlan, seanB, effulgentsia: Make MediaLibraryState implement CacheableDependencyInterface to remove the need for hardcoding a cache context
Release type: Bug fixes

软件描述

Drupal是使用PHP语言编写的开源内容管理框架(CMF),它由内容管理系统(CMS)和PHP开发框架(Framework)共同构成。

CVE编号

TSRC分析

暂无

业界资讯

暂无

评论

提交评论 您输入的评论有误,请重新输入