Drupal Audio And MediaField Modules GetID3 Remote Command Execution Vulnerability

Drupal Audio And MediaField Modules GetID3 Remote Command Execution Vulnerability

Solution:
The vendor has released fixes to address this issue. Please see the references for more information.

Drupal Mediafield Module 5.x-1.x-dev

Drupal mediafield-5.x-1.0.tar.gz
http://ftp.osuosl.org/pub/drupal/files/projects/mediafield-5.x-1.0.tar .gz

Drupal Audio Module 4.7.x-1 .x-dev

Drupal audio-4.7.x-1.x-dev.tar.gz
http://ftp.osuosl.org/pub/drupal/files/projects/audio-4.7.x-1.x-dev.ta r.gz

Drupal Audio Module 5.x-0.2

Drupal audio-5.x-0.3.tar.gz
http://ftp.osuosl.org/pub/drupal/files/projects/audio-5.x-0.3.tar.gz

Drupal Mediafield Module 4.7.x-1 .x-dev

Drupal mediafield-4.7.x-1.0.tar.gz
http://ftp.osuosl.org/pub/drupal/files/projects/mediafield-4.7.x-1.0.t ar.gz

Drupal mediafield-4.7.x-1.x-dev.tar.gz
http://ftp.osuosl.org/pub/drupal/files/projects/mediafield-4.7.x-1.x-d ev.tar.gz

Drupal Audio Module 5.x-0.x-dev

Drupal audio-5.x-0.x-dev.tar.gz
http://ftp.osuosl.org/pub/drupal/files/projects/audio-5.x-0.x-dev.tar. gz