Panopoly 1.47 released for security updates in Views and Entity Reference

We encourage users to post events happening in the community to the community events group on https://www.drupal.org.
dsnopek's picture

Hi Everyone!

Views 3.17 and Entity Reference 1.5 were released yesterday to fix moderately critical and security vulnerabilities. You can learn more in the security advisories:

Views - Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-068

Entity Reference - Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-067

Besides that, there's only a minor bug fix to WYSIWYG.

For more information, please see the full release notes:

https://www.drupal.org/project/panopoly/releases/7.x-1.47

Remember: you have to update the WHOLE profile - not just the individual panopoly_* modules! Otherwise, you'll be missing important module updates/patches, and it isn't guarenteed to work.

For full instructions on how to upgrade, please see the Upgrading Panopoly guide! (We invite you to help us improve it as well.)

And, of course, you can find links to download, documentation and report problems on the Panopoly project page:

https://drupal.org/project/panopoly

Thanks!