Protection against critical Drupal security bug SA-CORE-2018-004

Posted April 25th, 2018 in Tech Corner. Tags: .

The authors of the Drupal CMS software today announced yet another “highly critical” Drupal security bug (SA-CORE-2018-004).

This vulnerability is likely to be widely exploited soon. If you use Drupal 7 or 8 without updating it, your site will be compromised (taken over by “hackers”).

To protect our customers who have installed Drupal, we have “patched” the vulnerable files on every copy of Drupal on our servers, blocking the attacks that we expect to see in the future. We used these patches:

So our customers are protected against this particular problem. But that doesn’t mean you shouldn’t upgrade Drupal: older versions also have other security bugs. If you’ve installed the Drupal software on your site, please make absolutely sure you’ve upgraded to the latest version today.

  1. Recent Posts

    1. PHP versions 8.1.30, 8.2.24, and 8.3.12
    2. MariaDB (MySQL) database server update from 10.5 to 10.11 (completed)
    3. Labor Day 2024 holiday hours
    4. PHP versions 8.2.22 and 8.3.10
    5. WordPress 6.6
    6. PHP versions 8.1.29, 8.2.21, and 8.3.9
    7. 4th of July 2024 holiday hours
    8. Memorial Day 2024 holiday hours
    9. PHP versions 8.2.19 and 8.3.7
    10. PHP versions 8.1.28, 8.2.18, and 8.3.6

  2. Categories

  3. Tags

    all servers email holiday hours linux mailman maintenance mod_security mysql network php phpmyadmin security server updates spam ssl status updates webmail wordpress zapp

  4. Feeds