[Nfb-web] Critical Drupal Update

Rachel Olivero rachel at olivero.us
Thu Mar 29 12:34:50 UTC 2018


Good Morning All:

For those of you using Drupal to power your websites, please take note
that the Drupal Security Team released a highly critical update to
Drupal Core yesterday. this update resolves a remote execution
vulnerability that would allow an attacker to compromise a Drupal site
and gain access to, and control, all content. It is highly recommended
that site administrators update their sites. The text of the advisory
can be reviewed at https://www.drupal.org/sa-core-2018-002. An FAQ
document is also available at
https://groups.drupal.org/security/faq-2018-002.
If you are still running Drupal 6, please note that D6 has reached end
of life. The D6 Long Term Support project has provided a patches for
this vulnerability that you can manually apply to your site.
Thanks,
Rachel



More information about the NFB-Web mailing list