Drupal Security

person using drupal on a laptop

Drupal 7 will reach end-of-life in November of 2021

Tom Furmanski February 27, 2019 0 Comments
Drupal 7 was first released in January 2011. In November 2021, after over a decade, Drupal 7 will reach end of life (EOL). Official community support for version 7 will end, along with support provided by the Drupal Association on Drupal.org. This means that automated testing services for Drupal 7 will be shut down, and there will be no more updates provided by the Drupal Security Team. When this...
Read More

Multiple vulnerabilities patched in October 17th Drupal Core update

Tom Furmanski October 18, 2018 0 Comments
It's been a while since the last Drupal Core update was released (back in April) but it's now time, once again, to install a Drupal Core update to keep your Drupal websites secure. The following issues with Drupal Core have been patched, and are included in yesterday's update: In some conditions, content moderation fails to check a users access to use certain transitions, leading to an access...
Read More

Drupal admins: Another critical security update is coming for Drupal on Wednesday

Jenny Howell April 24, 2018 0 Comments
Once again, the developers of Drupal are releasing an emergency patch for a critical vulnerability in the popular CMS. The critical security advisory issued on Monday indicates another patch will be released between 16:00 - 18:00 UTC on April 25th, 2018. Specific details of the vulnerability the patch will correct are unclear, as the developers have not provided any hints of the nature of the...
Read More

Do not updated to Drupal 7.58

Chris Grant (he/him) April 14, 2018 0 Comments
Following the remote code execution vulnerability discovered in all versions of Drupal released prior to 28th March 2018, and patched in Drupal 7.58 and Drupal 8.5.1, may have been hacked if they have not been updated to Drupal 7.58 (or 8.5.1) by Wednesday, 11th April 2018, may have been hacked after the Drupal security team became aware of automated attacks attempting to compromise Drupal 7...
Read More
important-information-about-the-security-of-websites-running-drupal-version-757-or-below-or-drupal.png

Security of Drupal 8.5 or below.

Chris O'Brien March 21, 2018 0 Comments
This post contains important, time sensitive information about the security of your website if you're running Drupal version 7.57 or below or Drupal 8.5 or below. If you're an O'Brien Media client with a Drupal website you'll probably be familiar with the periodic Drupal update emails we send out regarding how important it is to keep up to date with security patches and other updates for your...
Read More