Releases: govCMS/GovCMS7
7.x-3.32 Release
Changes since 7.x-3.30:
What is included in the update?
-
Drupal Core from 7.88 to 7.91 https://www.drupal.org/project/drupal/releases/7.91 https://www.drupal.org/sa-core-2022-012 ·
-
Context to from 7.x-3.10 to 7.x-3.11 https://www.drupal.org/project/context/releases/7.x-3.11 https://www.drupal.org/sa-contrib-2022-049
7.x-3.31 Release
Changes since 7.x-3.30:
What is included in the update?
- Drupal Core from 7.88 to 7.91 https://www.drupal.org/project/drupal/releases/7.91 https://www.drupal.org/sa-core-2022-012 ·
- Context to from 7.x-3.10 to 7.x-3.11 https://www.drupal.org/project/context/releases/7.x-3.11 https://www.drupal.org/sa-contrib-2022-049
7.x-3.30 Release
Changes since 7.x-3.29:
What is included in the update?
- Update Link module from from 7.x-1.6 to 7.x-1.11 (https://www.drupal.org/sa-contrib-2022-034 ; https://www.drupal.org/project/link/releases/7.x-1.11)
- Increase length of passwords to be 14 characters by default
7.x-3.29 Release
Changes since 7.x-3.28:
Module updates
- Role Delegation from 7.x-1.2 to 7.x-1.3 (https://www.drupal.org/sa-contrib-2022-031 ; https://www.drupal.org/project/role_delegation/releases/7.x-1.3)
7.x-3.28 Release
What is included in the update?
- CKEditor Library from 4.17.1 to 4.18.0
https://www.drupal.org/sa-core-2022-005
https://ckeditor.com/cke4/release/CKEditor-4.18.0
7.x-3.27 Release
Advice
- Distribution updated on Monday 28 February 2022
- Deployments are scheduled to commence on Tuesday 1 March 2022
- Deployments will be conducted throughout the daytime and into the evening.
- Deployments to all websites should be completed by 10am Wednesday 2 March 2022
- No outages are expected to websites during the deployment process.
- The D7 distribution will continue to be supported after this update.
Module update
- Drupal Core from 7.87 to 7.88 (https://www.drupal.org/sa-core-2022-003 ; https://www.drupal.org/project/drupal/releases/7.88)
Modules added/removed/ deprecated
Nothing was added/removed from the distribution
PaaS customers
- If you use the GovCMS D7 distribution. You should aim to apply this update to your distribution as soon as possible.
- If you manage your own distribution, this release should have been assessed and addressed.
More information
If you have any concerns, raise a ticket at https://www.govcms.support, alternatively subscribe to https://status.govcms.support/ for information on updates to the GovCMS platform
7.x-3.26 Release
GovCMS D7 Update 7.x-3.26 Release Notes
Advice
GovCMS released the Drupal 7 (D7) distribution on Friday 18 February 2022. Deployment is scheduled to commence from Monday 21 February 2022 and will be conducted throughout the daytime and into the evening.
It addresses recent security advisories issued by Drupal.org. GovCMS assessed these risks as it applied to the D7 distribution and concluded the risk remained moderately critical.
No outages are expected to websites during the deployment process.
What is included in the update?
-
Drupal Core from 7.82 to 7.87
https://www.drupal.org/sa-core-2022-001
https://www.drupal.org/sa-core-2022-002
https://www.drupal.org/project/drupal/releases/7.87 -
Navbar module from 1.7 to 1.8
https://www.drupal.org/sa-contrib-2022-011
https://www.drupal.org/project/navbar/releases/7.x-1.8
What modules are added/removed in the distribution?
Nothing was added/removed from the distribution
What support will be provided after these update?
The D7 distribution will continue to be supported after this update. Drupal 7 will be end-of-life on 28 November 2022.
More information
If you have any concerns, raise a ticket at https://www.govcms.support/
Stay up to date by subscribing for notifications at https://status.govcms.support/
7.x-3.25 Release
GovCMS D7 Update 7.x-3.25 Release Notes
Actions
SaaS customers: All customers will need to check their site after the deployment to ensure there aren’t any issues.
PaaS customers: D7 PaaS customers will need to patch your projects.
- If you use the GovCMS D7 distribution.
You should priorities this update to your distribution. Updated files released on Friday 14 January 2022 and are available from https://www.drupal.org/project/govcms/releases/7.x-3.25 https://github.com/govCMS/GovCMS7/releases/tag/7.x-3.25
Release
- Distribution was updated on Friday 14 January 2022
- Deployments are scheduled to commence on Monday 17 January 2022
- Deployments will be conducted throughout the daytime and into the evening.
- No modules have been added/removed from the distribution
- No outages are expected to websites during the deployment process.
- The D7 distribution will continue to be supported after this update.
What is included in the update?
- Update Wysiwyg module from 2.7 to 2.9.
More information
If you have any concerns, raise a ticket at https://www.govcms.support, alternatively subscribe to https://status.govcms.support/ for information on updates to the GovCMS platform
7.x-3.24 Release
GovCMS D7 Update 7.x-3.24 Release Notes
Advice
Over the weekend (11 December), a zero-day exploit (Log4Shell) in the popular Java logging library log4j was discovered that results in Remote Code Execution (RCE) by logging a certain string. See https://www.lunasec.io/docs/blog/log4j-zero-day/ and GHSA-jfh8-c2jp-5v3q for more information.
GovCMS is currently prioritising this Zero Day CVE (See CVE-2021-44228 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228).
GovCMS D7 distribution used Solr6. We assessed the vulnerability and determined that D7 distribution is not affected. D7 PaaS Customers the run Solr7 will need to self-assess and patch your projects ASAP.
Actions
SaaS customers: All customers will need to check their site after the deployment to ensure there aren’t any issues.
PaaS customers: D7 PaaS customers will need to patch your projects URGENTLY.
- If you use the GovCMS D7 distribution.
You should priorities this update to your distribution. Updated files released on Tuesday 14 December 2021 and are available from https://www.drupal.org/project/govcms/releases/7.x-3.24 https://github.com/govCMS/GovCMS7/releases/tag/7.x-3.24 - If you don’t use the GovCMS D7 distribution.
IF you have any projects running on Solr 7 or above, there is a temporary mitigation in place for existing environments, but you should upgrade to https://github.com/uselagoon/lagoon-images/releases/tag/21.12.0 base images as soon as practical (so newly created environments receive protection). THEN immediately apply the SOLR7 patch as it pertains to your codebase
Release
- Distribution was updated on Tuesday 14 December 2021
- Deployments are scheduled to commence on Wednesday 15 December 2021
- Deployments will be conducted throughout the daytime and into the evening.
- No modules have been added/removed from the distribution
- No outages are expected to websites during the deployment process.
- The D7 distribution will continue to be supported after this update.
What is included in the update?
- Search API Page from 7.x-1.5 to 7.x-1.6 (https://www.drupal.org/sa-contrib-2021-046 ; https://www.drupal.org/project/search_api_page/releases/7.x-1.6)
- Update CKEditor library 4.17.1 (https://ckeditor.com/cke4/release/CKEditor-4.17.1 )
- Patch Wysiwyg module (https://www.drupal.org/project/wysiwyg/issues/3227897 )
More information
If you have any concerns, raise a ticket at https://www.govcms.support, alternatively subscribe to https://status.govcms.support/ for information on updates to the GovCMS platform
7.x-3.23 Release
GovCMS updated Drupal 7 (D7) distribution on Tuesday 14 September 2021. Deployment is scheduled to commence on Wednesday 15 September 2021 and will be conducted throughout the daytime and into the evening.
It addresses a recent security advisories issued by Drupal.org. GovCMS assessed this critical risk as it applied to D7 distribution, subsequently the security risk was downgraded to moderately critical.
Module update
- Update to CKEditor 4.16.2 https://www.drupal.org/sa-core-2021-005 https://ckeditor.com/cke4/release/CKEditor-4.16.2 https://www.drupal.org/project/govcms/releases/7.x-3.23
Advice
- Nothing will be removed from the D7 distribution in this update.
- No outages are expected to websites during the deployment process.
- The D7 distribution will be supported until November 2022.
More information
If you have any concerns, raise a ticket at https://www.govcms.support, alternatively subscribe to https://status.govcms.support/ for information on updates to the GovCMS platform