[kwlug-disc] Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002

[Ronald Barnes]

Khalid Baheyeldin wrote on 2018-04-01 09:38 AM:

> I forgot to mention the most basic thing of Drupal security updates:
> 
>   * Enable the 'Update manager' module (part of Core)
>   * Configure it for 'Daily checks'
>   * Enter an email address to notify when new versions are found
>   * Set it to notify 'Only security updates', so you don't get bothered
>     by non-security stuff

Thanks Khalid.  I had all the above set (except the last item - wasn't 
aware of it), and you still brought the latest issue to my attention 
before the daily check did.


Updated immediately, all seems good.


r b