Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Fedora 25: 2017-82ce4661d6 Moderate: Access Bypass in Drupal7-Views

fedora
Calendar Grey March 9, 2017
Scroller Fedora
The latest Fedora 25 update resolves a significant vulnerability in drupal7-views that could lead to unauthorized access. Ensure your system is upgraded to maintain security.
* [7.x-3.15]() * [Moderately Critical - Access Bypass - SA-CONTRIB-2017-022]()

Summary

You need Views if:

* You like the default front page view, but you find you want to sort it

differently.

* You like the default taxonomy/term view, but you find you want to sort it

differently; for example, alphabetically.

* You use /tracker, but you want to restrict it to posts of a certain type.

* You like the idea of the 'article' module, but it doesn't display articles

the way you like.

* You want a way to display a block with the 5 most recent posts of some

particular type.

* You want to provide 'unread forum posts'.

* You want a monthly archive similar to the typical Movable Type/Wordpress

archives that displays a link to the in the form of "Month, YYYY (X)" where

X is the number of posts that month, and displays them in a block. The links

lead to a simple list of posts for that month.

Views can do a lot more than that, but those are some of the obvious uses of

Views.

This package provides the following Drupal 7 modules:

* views

* views_ui

Update Information:

* [7.x-3.15]() * [Moderately Critical - Access Bypass - SA- CONTRIB-2017-022]()

Change Log

References


[ 1 ] Bug #1425991 - drupal7-views-3.15 is available https://bugzilla.redhat.com/show_bug.cgi?id=1425991

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade drupal7-views' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: drupal7-views
Product: Fedora 25
Version: 3.15
Release: 1.fc25
URL:
Summary: Create customized lists and queries from your database

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.