Security advisories

These posts by the Drupal security team are also sent to the security announcements e-mail list.

SA-CORE-2009-008 - Drupal core - Multiple vulnerabilities

Drupal Security Team - September 16, 2009 - 19:39

Advisory ID: DRUPAL-SA-CORE-2009-008
Project: Drupal core
Version: 5.x, 6.x
Date: 2009-September-16
Security risk: Critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

» Read more

SA-CORE-2009-007 - Drupal core - Multiple vulnerabilities

Security advisories for Drupal core · Drupal 5.x · Drupal 6.x

Drupal Security Team - July 1, 2009 - 20:56

Advisory ID: DRUPAL-SA-CORE-2009-007
Project: Drupal core
Version: 5.x, 6.x
Date: 2009-July-1
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Multiple vulnerabilities

» Read more

SA-CORE-2009-006 - Drupal core - Cross site scripting

Security advisories for Drupal core · Drupal 5.x · Drupal 6.x

Drupal Security Team - May 13, 2009 - 19:47

Advisory ID: DRUPAL-SA-CORE-2009-006
Project: Drupal core
Version: 5.x, 6.x
Date: 2009-May-13
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting

» Read more

SA-CORE-2009-005 - Drupal core - Cross site scripting

Security advisories for Drupal core · Drupal 5.x · Drupal 6.x

Drupal Security Team - April 30, 2009 - 01:48

Advisory ID: DRUPAL-SA-CORE-2009-005
Project: Drupal core
Version: 5.x, 6.x
Date: 2009-April-29
Security risk: Moderately critical
Exploitable from: Remote
Vulnerability: Cross site scripting

» Read more

New pages and RSS feeds for security announcements

Security advisories for Drupal core · Planet Drupal

pwolanin - March 18, 2009 - 15:51

Separate Security Announcements by Type

To make the impact of different security advisories and announcements easier to see, they are now separated by type.

Drupal core security advisories: http://drupal.org/security
RSS feed for Drupal core: http://drupal.org/security/rss.xml

Contributed project security advisories: http://drupal.org/security/contrib
RSS feed for contributed projects: http://drupal.org/security/contrib/rss.xml

Public service announcements: http://drupal.org/security/psa
RSS feed for announcements: http://drupal.org/security/psa/rss.xml

We encourage those using RSS readers to track security-related developments to subscribe to all three of these feeds.

All posts to each of these three forums will still be sent to the one security announcements e-mail list. To subscribe to that e-mail list, once logged in, go to your user profile page and subscribe to the security newsletter on the Edit » My newsletters tab.

All future public service announcements will only be posted to the Public service announcements page and feed.

» Read more