islandora 2.19.0

The islandora_advanced_search submodule is removed in this release. If you do not use that submodule, you can safely update.

If you use the islandora_advanced_search submodule, you will want to schedule work to migrate to the advanced_search module. Though this will require significant rework of block placements. While that work is being done, you can mitigate the vulnerability by applying this patch to the islandora module

diff --git a/modules/islandora_advanced_search/src/Controller/AjaxBlocksController.php b/modules/islandora_advanced_search/src/Controller/AjaxBlocksController.php
index 66da450e..65e86ae6 100644
--- a/modules/islandora_advanced_search/src/Controller/AjaxBlocksController.php
+++ b/modules/islandora_advanced_search/src/Controller/AjaxBlocksController.php
@@ -149,7 +149,7 @@ class AjaxBlocksController extends ControllerBase {
     foreach ($blocks as $block_id => $block_selector) {
       $block_entity = $this->storage->load($block_id);

-      if ($block_entity) {
+      if ($block_entity && $block_entity->access('view')) {
         // Render a block, then add it to the response as a replace command.
         $block_view = $this->entityTypeManager
           ->getViewBuilder('block')