Islandora Module Security Release

[Joe Corall]

Hi Everyone,

The Islandora module had a new version released today (2.17.5) that patches a security vulnerability: https://www.drupal.org/sa-contrib-2026-016

This vulnerability is mitigated by the fact that an attacker must have a role with the permission "create media" and the ability to edit nodes.

Please upgrade your Islandora module to version 2.17.5 to patch this vulnerability https://www.drupal.org/project/islandora/releases/2.17.5

Thanks to Drew Webber (mcdruid) of the Drupal Security Team for reporting this vulnerability.

Joe

[gi...@shaw.ca]

Can you suggest a good way to upgrade PHP in order to be able to update the Islandora module ?

I was one of the early adopters of the ansible playbook and still running php 8.1 :-(

Thanks