views_refresh 7.x-1.2

Git tag 7.x-1.2
Security update

- Fixes Views refresh - Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-069
- Issue #2564205: Decode html entities for views_ajax calls: Decode entities for view arguments
- It's possible to alter view refresh command output
- Views settings are checked before processing

entityreference 7.x-1.5

Git tag 7.x-1.5
Security update

The release fixes Entity Reference - Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-067

fblikebutton 7.x-2.6

Git tag 7.x-2.6
Security update

better_field_descriptions 7.x-1.2

Git tag 7.x-1.2
Security update

Fixes: Better field descriptions - Critical - XSS - SA-CONTRIB-2017-064

session_cache 7.x-1.5

Git tag 7.x-1.5
Security update

Fixes: session_cache - Critical - Multiple vulnerabilities - DRUPAL-SA-CONTRIB-2017-065

relation 7.x-1.1

Git tag 7.x-1.1
Security update

Fixes: Relation - Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-063

If it is intended that relation endpoints (from relation dummy field widget display) should be shown to certain role, view relations permission should be given to those roles.

Pages

Subscribe with RSS Subscribe to RSS - Security update