Drupal 7.87
20 January 2022
Drupal version 7.87 is now available (security release).
Upgrading to Drupal 7.87
Drupal 7.87 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Drupal updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Drupal install to test the 7.87 upgrade prior to applying it live. Get started managing your Drupal installations with Installatron
What's New in Drupal 7.87
7.87
Bug Fixes
- Fix regression caused by jQuery UI position() backport
7.86
Security
- Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2022-001 - CVE-2021-41184: XSS in the `of` option of the `.position()` util
- Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2022-002 - CVE-2021-41182: XSS in the altField option of the Datepicker widget
- Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2022-002 - CVE-2021-41183: XSS in *Text options of the Datepicker widget
- Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2022-002 - CVE-2016-7103: XSS in closeText option of Dialog
- Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2022-002 - CVE-2010-5312: XSS in the title option of Dialog (applicable only to the jQuery UI version included in D7 core)