WHAT HAPPENED?

Drupal has released updates to address multiple vulnerabilities.

Advanced Users: For the full Public Announcement refer to Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-001 at https://www.drupal.org/SA-2017-001.

AFFECTED SYSTEMS:

• Drupal core 8.x versions prior to 8.2.7

WHAT'S THE PROBLEM?

If exploited, one of the vulnerabilities may allow an attacker take control of an affected system.

WHAT DO YOU NEED TO DO?

Install the latest version:

• If you use Drupal 8.x, upgrade to Drupal core 8.2.7

RELATED LINKS

• IT Security - http://it.ucsf.edu/security