devportal 4.18.01 - CVE in default install

[cloud]

Community,

I recently provisioned 4.18.01 portal, which installs drupal 7.56 as default. This version has a CVE issue (dated 21-FEB-2018), see details in link below.

https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-06-21/drupal-core-...

FIX: Please run 'drush up', which will upgrade your portal to 7.57 to remediate the issue. Please retest your smartdocs/api features to ensure no-breakages.

[karlscheirer]

I think you meant this CVE: https://www.drupal.org/sa-core-2018-001, but that's good advice to get onto Drupal 7.57.

[karlscheirer]

Essentially the same instructions, but for all OPDK customers there is documentation at https://docs.apigee.com/private-cloud/latest/upgrading-drupal-version-private-cloud-installation