drupal 6 Archives - Orange Internet Solutions https://orangeinternetsolutions.com/tag/drupal-6/ All You Need for Your Online Business Wed, 13 Aug 2014 18:48:21 +0000 en-US hourly 1 https://wordpress.org/?v=7.0.4 https://orangeinternetsolutions.com/wp-content/uploads/2017/10/orange-favicon-1-75x75.png drupal 6 Archives - Orange Internet Solutions https://orangeinternetsolutions.com/tag/drupal-6/ 32 32 Drupal 6 6.33 Update Released https://orangeinternetsolutions.com/security-updates/drupal-6-6-33-update-released/ Wed, 13 Aug 2014 18:48:21 +0000 http://miamihoster.com/?p=7371 “Drupal 6 6.33 this release fixes security vulnerabilities.” Drupal 6 6.33 is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration, publishing workflow, discussion capabilities, news aggregation, metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes. Equipped with […]

The post Drupal 6 6.33 Update Released appeared first on Orange Internet Solutions.

]]>

“Drupal 6 6.33 this release fixes security vulnerabilities.”

Drupla 6 6.33 logo - Miami Hoster - Hosting domains and websites

Drupal 6 6.33 is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration, publishing workflow, discussion capabilities, news aggregation, metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.

Equipped with a powerful blend of features and configurability, Drupal 6 6.33 can support a diverse range of web projects ranging from personal weblogs to large community-driven sites.

Changes Details

  • As of this release, the XML-RPC system in Drupal core will ignore information in <?xml> declarations contained within XML-RPC messages (for example, XML version or character encoding information). This is not expected to matter for the vast majority of use cases.
  • The XML-RPC system and OpenID XRDS parser will also reject messages that contain over ~30,000 XML tags within them. This limit is not expected to matter for the vast majority of use cases. It is also only an approximate limit, since Drupal 6 is not capable of efficiently counting the exact number of XML tags. If you need to process an XML-RPC message that is larger than that, you can change the limit by setting the “xmlrpc_message_maximum_tag_count” variable to a higher value. For example, in settings.php:
    <?php // Allow XML-RPC messages with up to ~50,000 XML tags to be
    processed. $conf[‘xmlrpc_message_maximum_tag_count’] = 50000;?>
    Do not set the value higher than you need, since allowing too many XML tags per XML-RPC message increases your site’s vulnerability to denial of service attacks.

    The OpenID XRDS parser has a similar variable (“openid_xrds_maximum_tag_count”) which can be used in a similar way.

  • As a consequence of the security fixes in this release, sites using the OpenID module will reject login attempts from OpenID servers which return an XRDS file with a declared DOCTYPE (due to the possibility of malicious DOCTYPE declarations). A DOCTYPE declaration is not part of the OpenID specification, so this is not expected to cause any problems for valid OpenID servers (this is also the same restriction that was earlier added to Drupal 7 to fix a different security issue; see SA-CORE-2012-003 and the Drupal 7.16 release notes). However, sites using unusual or custom OpenID servers may wish to test OpenID logins before deploying this release.

[otw_is sidebar=otw-sidebar-8]

More Information

 [otw_is sidebar=otw-sidebar-7]

The post Drupal 6 6.33 Update Released appeared first on Orange Internet Solutions.

]]> Drupal 6.30 Update Released https://orangeinternetsolutions.com/security-updates/drupal-6-30-update-released/ Thu, 16 Jan 2014 16:34:08 +0000 http://miamihoster.com/drupal-6-30-update-released Drupal 6.30 maintenance and security release of the Drupal 6 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately.  Drupal is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration, publishing workflow, discussion capabilities, news aggregation, metadata functionalities using […]

The post Drupal 6.30 Update Released appeared first on Orange Internet Solutions.

]]>

Drupal 6.30 maintenance and security release of the Drupal 6 series. This release fixes security vulnerabilities. Sites are urged to upgrade immediately. 

Drupla 6 logo - Miami Hoster - Hosting domains and websitesDrupal is an open-source platform and content management system for building dynamic web sites offering a broad range of features and services including user administration, publishing workflow, discussion capabilities, news aggregation, metadata functionalities using controlled vocabularies and XML publishing for content sharing purposes.

Equipped with a powerful blend of features and configurability, Drupal can support a diverse range of web projects ranging from personal weblogs to large community-driven sites.

Changes Details

  • Advisory ID: DRUPAL-SA-CORE-2014-001
  • Project: Drupal core
  • Version: 6.x, 7.x
  • Date: 2014-January-15
  • Security risk: Highly critical
  • Exploitable from: Remote
  • Vulnerability: Multiple vulnerabilities

[otw_is sidebar=otw-sidebar-8]

More Information

  • Start Drupal 6
    Run Drupal 6 from your domain and hosting service.
    Register a Domain Name if you don’t have one and choose one of our Hosting Plans to install Drupal 6.
  • Hosted Drupal 6
    Contact us if you don’t need a domain or hosting service, but want the  Drupal 6 anyway.
 [otw_is sidebar=otw-sidebar-7]

The post Drupal 6.30 Update Released appeared first on Orange Internet Solutions.

]]>