Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Fedora 27 Drupal 7 Access Bypass Moderate Advisory 2017-25114a9d7f

fedora
Calendar Grey September 30, 2017
Scroller Fedora
Important security update for Drupal 7 views fixing vulnerability related to access control. Update immediately to strengthen your site!
* [7.x-3.18](https://) * [7.x-3.17](https://) * [Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-068](https://)

Summary

You need Views if:

* You like the default front page view, but you find you want to sort it

differently.

* You like the default taxonomy/term view, but you find you want to sort it

differently; for example, alphabetically.

* You use /tracker, but you want to restrict it to posts of a certain type.

* You like the idea of the 'article' module, but it doesn't display articles

the way you like.

* You want a way to display a block with the 5 most recent posts of some

particular type.

* You want to provide 'unread forum posts'.

* You want a monthly archive similar to the typical Movable Type/Wordpress

archives that displays a link to the in the form of "Month, YYYY (X)" where

X is the number of posts that month, and displays them in a block. The links

lead to a simple list of posts for that month.

Views can do a lot more than that, but those are some of the obvious uses of

Views.

This package provides the following Drupal 7 modules:

* views

* views_ui

* [7.x-3.18](https://) *

[7.x-3.17](https://) *

[Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-068](https://www.drupal.org/node/2902604)

[ 1 ] Bug #1482276 - drupal7-views-3.18 is available

https://bugzilla.redhat.com/show_bug.cgi?id=1482276

su -c 'dnf upgrade drupal7-views' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Product: Fedora 27
Version: 3.18
Release: 1.fc27
URL: https://
Summary: Create customized lists and queries from your database

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.