Security Update:Drupal Releases Security Updates to Address Critical Vulnerabilities
Date and Time
Drupal Core 6x, 7x, and 8.0x Users
Drupal has released updates to address multiple Critical vulnerabilities.
Advanced Users: For the full Public Announcement refer to Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-001 at https://www.drupal.org/SA-CORE-2016-001.
- Drupal core 6.x users
- Drupal core 7.x users
- Drupal core 8.0.x users
WHAT'S THE PROBLEM?
If exploited, one of the vulnerabilities may allow an attacker take control of an affected website.
WHAT DO YOU NEED TO DO?
Install the latest version:
- If you use Drupal 6.x, upgrade to Drupal core 6.38 at https://www.drupal.org/drupal-6.38-release-notes
- If you use Drupal 7.x, upgrade to Drupal core 7.43 at https://www.drupal.org/drupal-7.43-release-notes
- If you use Drupal 8.0.x, upgrade to Drupal core 8.0.4 at https://www.drupal.org/drupal-8.0.4-release-notes
- IT Security - http://it.ucsf.edu/security