Login
Newsletter
Werbung

Sicherheit: Mangelnde Rechteprüfung in drupal7-views
Aktuelle Meldungen Distributionen
Name: Mangelnde Rechteprüfung in drupal7-views
ID: FEDORA-2016-ed5f606dde
Distribution: Fedora
Plattformen: Fedora 23
Datum: Fr, 29. Juli 2016, 07:17
Referenzen: Keine Angabe
Applikationen: Drupal

Originalnachricht

Name        : drupal7-views
Product : Fedora 23
Version : 3.14
Release : 1.fc23
URL : http://drupal.org/project/views
Summary : Create customized lists and queries from your database
Description :
You need Views if:
* You like the default front page view, but you find you want to sort it
differently.
* You like the default taxonomy/term view, but you find you want to sort it
differently; for example, alphabetically.
* You use /tracker, but you want to restrict it to posts of a certain type.
* You like the idea of the 'article' module, but it doesn't display
articles
the way you like.
* You want a way to display a block with the 5 most recent posts of some
particular type.
* You want to provide 'unread forum posts'.
* You want a monthly archive similar to the typical Movable Type/Wordpress
archives that displays a link to the in the form of "Month, YYYY (X)"
where
X is the number of posts that month, and displays them in a block. The links
lead to a simple list of posts for that month.

Views can do a lot more than that, but those are some of the obvious uses of
Views.

This package provides the following Drupal 7 modules:
* views
* views_ui

-------------------------------------------------------------------------------
-
Update Information:

Fixes [Views - Less Critical - Access Bypass - SA-
CONTRIB-2016-036](https://www.drupal.org/node/2749333) Changes since 7.x-3.13:
- Adding field handlers for statistics fields - \#2200309 by helmo: Changed
invalid placeholder from "handler" to "extender". - \#2708535
by stefan.r: Allow
users to sort on a specific language, showing it before any others - \#1359298
by robertwb: Support Plugins for Views Aggregate in D7 (D8 Backport) -
\#1358412
by davidgrayston, marcelovani, jamiecuthill, mikeytown2, ParisLiakos, Josh
Waihi: Content: Has taxonomy term ID (with depth) query performance - \#1615438
by rsmylski, MediaFormat, awolfey, ParisLiakos: Search terms: nodes dont appear
when using multiple arguments - Revert "Issue #1615438 by rsmylski,
MediaFormat,
awolfey, ParisLiakos: Search terms: nodes dont appear when using multiple
arguments" - \#1567354 by joelpittet, robcolburn: Stop lowercasing
undefined
values. - \#1535912 by dawehner, joelpittet: Remove no-longer-necessary
$condition variable. - \#981870 by infojunkie, joelpittet, andypost:
views::get_url() to skip default arguments - \#959048 by rooby, dawehner,
joelpittet, pyry_p: Added a revision count. - \#2563431 by joelpittet, lauriii:
ajax_render should not be used; ajax_deliver should be used instead - \#564106
by rv0 et al.: More link to point to custom URL - Revert "Issue #564106 by
dawehner et al.: More link to point to custom URL" - \#1608920 by dawehner,
rudiedirkx, axel.rutz, solotandem, Anybody, JvE, helior: Add drop-button field
display - \#1482824 by DeFr, Alan Evans, robertom: Block display view ajax
pager
does not advance with multiple pagers on a page when the first pager > 0 -
\#1232920 by dawehner, Anybody, chiddicks: Hide earlier in the process. -
\#1190900 by ls, philipz, Neograph734, Oniryck: Random sort from multiple value
field in views - \#1090432 by fubhy, derhasi, rudiedirkx, IT-Cru: Allow
additional field-to-field conditions with the default views_join handler -
\#652610 by johnv, dawehner, colan, Les Lim: Stop caching when not set. -
\#564106 by dawehner et al.: More link to point to custom URL - \#1948578 by
jweowu: Duplicate code. Issue #1515156 patch applied twice - Merge branch
'7.x-3.x' of git.drupal.org:project/views into 7.x-3.x - Revert
"Issue #2290127
by DanChadwick: pre_render not consistently passed result by reference" -
\#1685144 by marcelovani, dawehner, q0rban: Refactor init_localization() to
init
and return the translate property for all plugins. - \#1262630 by damiankloip:
Raw value tokens not replaced if used in css class - \#1262630 by Jelle_S,
dgtlmoon: Raw value tokens not replaced if used in css class - \#2290127 by
DanChadwick: pre_render not consistently passed result by reference - \#551808
by dawehner, axel.rutz: Provide hook_views_save, hook_view_delete - \#339384 by
lotyrin, neuquen, marcingy, colan: Default option not set in exposed filters
when terms are selected - \#2610292 by dawehner: Fix 7.x-3.x-dev test failures.
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1347061 - drupal7-views-3.14 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1347061
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update drupal7-views' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/package-announce@lists.fedoraproject.org
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung