Critical Drupal 7 Security Flaw

  • Thursday, 30th October, 2014
  • 14:21pm

A critical security advisory for users of the Drupal 7 CMS software was released on October 15th, 2014.  This is a severe SQL injection based security flaw that affects all Drupal 7 installations.  Drupal maintainers issued the following public service announcement regarding the security flaw, and we urge you to read and take the appropriate suggested actions indicated in the Drupal PSA without delay: https://www.drupal.org/PSA-2014-003

Compudata hosting includes tennant isolation, so if you are not running Drupal 7, this issue will not affect you.  While we do include security measures to prevent many types of attacks on client content, if you have not purchased a CMS maintenance package through us, we can not ensure your Drupal 7 installation has not been compromised if it was not updated immediately following the security advisory on October 15th.  This is a link to the original security advisory: https://www.drupal.org/SA-CORE-2014-005

Please contact us immediately if you require any assistance dealing with this issue.

« Back