A drupal7 security update has been released for Debian GNU/Linux 9 LTS to address two issues.

DLA-2925-1: drupal7 security update

Package : drupal7
Version : 7.52-2+deb9u18

This security updates includes two fixes, backported respectively from
Drupal version 7.87 and 7.88:

- Fix a regression caused by Query ui position() backport in version
7.86 (backported as 7.52-2+deb9u17): was not checking for possible
"undefined" value in options

- Fix improper input validation in Drupal's form API

Drupal is a dynamic web site platform which allows an individual or
community of users to publish, manage and organize a variety of
content.