Posted by irakli on April 7, 2010 at 1:19am
There's a mild security issue in the latest recommended version of the CMF module (version included in OP 1.7): http://drupal.org/node/704114 which allows unregistered users to see unpublished content.
The issue is fixed in the Dev release of the module, which can be downloaded from: http://ftp.drupal.org/files/projects/cmf-6.x-2.x-dev.tar.gz
An immediate update is recommended.
Comments
Thanks for posting. There are
Thanks for posting. There are few other modules for which updates are available. Could you please tell us which ones should we NOT update? Thanks again.
sTattler.com
Heh, I've been meaning to
Heh, I've been meaning to post that list for a while, but could not get around.
Generally, the deal is: we try to thoroughly test everything as a whole, in OP, so if you update any module - it's at your own risk and on the conscience of the maintainer of the module (if they introduce new bugs :)).
However, some modules outright should not be updated, because they are patched and you would lose an important patch (unless you can re-apply one, which can be tricky). So, here's that list:
http://groups.drupal.org/node/60313
.............................................
http://twitter.com/inadarei