High DLA-2721-1 1 CVE

drupal7 - security update

Published Jul 26, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	drupal7	7.52-2+deb9u16

Vulnerabilities 1

High 7.1

CVE-2021-32610 EPSS 73%

Directory Traversal in Archive_Tar

In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

drupal/core drupal7 drupal7 php-pear Debian Ubuntu Alpine Packagist

Jul 27, 2021