[Clients] Drupal Views Module
Steve Hanson
shanson at cruiskeenconsulting.com
Fri Apr 9 11:08:06 CDT 2010
A fairly severe security issue was fixed a few days ago in the Drupal
Views module. I'm dropping you all a note about this because (for those
of you with Drupal sites on update maintenance) the status of this
update is not very clear.
We started testing the new version of Views, and found that it was
causing some severe problems with a few of the Drupal sites we
support. Because of this, we've only updated a few of the sites to
Views 2.9, the version with the security update. Most of the sites that
are on maintenance support have only had a patch applied to views, which
fixes ONLY the security issue, and doesn't include any of the other
views updates (which are causing the issues on some sites).
Mostly I'm sending this out because if you ARE on maintenance support
with us, it's likely that you're going to continue to get the error
message on administrative pages telling you that your site is out of
date and needs to have a security fix installed. This is because your
site is not running the current version of Views. However, the security
fix IS in place on your site.
Sorry for those of you who are receiving this and don't have Drupal
sites, or are not on maintenance. But we wanted to make sure you
understand that your site is secure, even though you may get complaints
otherwise. We're working with the developers of the views module to get
these problems corrected, and we will probably update all of you to
views 2.10 when it is released.
More information about the Clients
mailing list