Islandora and Advanced Search Security Update

[Joe Corall]

Two Drupal modules supported by the Islandora Foundation have security advisories/releases today:

• Advanced Search: https://www.drupal.org/i/3619357
• Islandora: https://www.drupal.org/i/3619358

The Advanced Search module should be updated to version 2.4.5 or above at your earliest convenience.

The Islandora security advisory is due to a submodule called islandora_advanced_search which was deprecated in July 2023 and had its logic ported to the Advanced Search module. No Islandora configurations for the last several years have had this submodule enabled by default, so it is likely your install of Islandora module is not vulnerable. Version 2.19.0 of the Islandora module removes the deprecated islandora_advanced_search submodule, so please be sure to read the full release notes at https://www.drupal.org/node/3620267 if you are using islandora_advanced_search.

Thanks to the Drupal Security Team for working with the Islandora Committers to patch and announce these advisories.