Blog

Drupal 6 core and CTools security update for SA-CORE-2020-007

by David Snopek on September 16, 2020 - 1:27pm

As you may know, Drupal 6 has reached End-of-Life (EOL) which means the Drupal Security Team is no longer doing Security Advisories or working on security patches for Drupal 6 core or contrib modules - but the Drupal 6 LTS vendors are and we're one of them!

Today, there is a Moderately Critical security release for Drupal core and CTools to fix a Cross-Site Scripting (XSS) vulnerability. You can learn more in the security advisory:

Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2020-007

Here you can download:

If you have a Drupal 6 site, we recommend you update immediately! We have already deployed the patch for all of our Drupal 6 Long-Term Support clients. :-)

FYI, there were other Drupal core security advisories made today, but those don't affect Drupal 6.

If you'd like all your Drupal 6 modules to receive security updates and have the fixes deployed the same day they're released, please check out our D6LTS plans.

Note: if you use the myDropWizard module (totally free!), you'll be alerted to these and any future security updates, and will be able to use drush to install them (even though they won't necessarily have a release on Drupal.org).

myDropWizard automatically transition to Extended Support to all current Drupal 7 customers!

by Elliot Christenson on September 1, 2020 - 6:20pm

In November 2022, Drupal 7 will be End-of-Life (EOL). To continue getting security updates, you'll need to get Extended Support (D7ES). But if you sign up before EOL, you'll get automatic security updates until then AND a better price when EOL comes.

myDropWizard is Watching Over Your Complex Drupal 7 Website During the Long Drupal 9 Upgrade

by Elliot Christenson on August 12, 2020 - 11:37pm

Your Drupal 7 site is working great, and it is powering important parts of your infrastructure. You need it to work safely, securely, and with a minimum of staff - especially now! myDropWizard has your back.

There are a number of sad and scary issues facing all of us, but working together we can solve any problem. myDropWizard would like to be a piece of the puzzle in helping your organization navigate the uncertainty of 2020 and beyond.

We Support the Mainstream Drupal: Drupal 7

by Elliot Christenson on July 1, 2020 - 9:03pm

Drupal 7 Forever

Where Does Drupal 7 Fit?

Drupal 9 is the future of Drupal. No doubt. It's awesome.

Drupal 8 site owners are busy upgrading to Drupal 9!

Drupal 6 is still a reality for a large number of critical websites.

In fact, at myDropWizard, we spent a lot of time focusing on Drupal 6 over the years. 32,000 Drupal 6 sites is not an insignificant number, and many of them contract for suport with us.

Drupal 6 core security update for SA-CORE-2020-004

by David Snopek on June 17, 2020 - 2:15pm

As you may know, Drupal 6 has reached End-of-Life (EOL) which means the Drupal Security Team is no longer doing Security Advisories or working on security patches for Drupal 6 core or contrib modules - but the Drupal 6 LTS vendors are and we're one of them!

Today, there is a Critical security release for Drupal core to fix a (Cross-Site Request Forgery) CSRF vulnerability. You can learn more in the security advisory:

Drupal core - Moderately Critical - Cross Site Request Forgery - SA-CORE-2020-004

Here you can download the Drupal 6 patch to fix, or a full release ZIP or TAR.GZ.

If you have a Drupal 6 site, we recommend you update immediately! We have already deployed the patch for all of our Drupal 6 Long-Term Support clients. :-)

FYI, there were other Drupal core security advisories made today, but those don't affect Drupal 6.

If you'd like all your Drupal 6 modules to receive security updates and have the fixes deployed the same day they're released, please check out our D6LTS plans.

Note: if you use the myDropWizard module (totally free!), you'll be alerted to these and any future security updates, and will be able to use drush to install them (even though they won't necessarily have a release on Drupal.org).

Drupal 9: The Drupal of Tomorrow? Drupal 7: Drupal of Now!

by Elliot Christenson on June 4, 2020 - 1:03am

Drupal 9: The Drupal of Tomorrow? Drupal 7: Drupal of Now!

The Top Five Reasons Why You Should Stick With Drupal 7 in 2020 and Beyond.

Drupal 9 was launched yesterday! There will be no shortage of buzz about how you can get your site upgraded and ready for Drupal 9. Obviously, it's the best Drupal ever, and it's positioned well for the future. However, are you well positioned for the future?

Drupal 6 core security update for SA-CORE-2020-002

by David Snopek on May 20, 2020 - 11:17am

As you may know, Drupal 6 has reached End-of-Life (EOL) which means the Drupal Security Team is no longer doing Security Advisories or working on security patches for Drupal 6 core or contrib modules - but the Drupal 6 LTS vendors are and we're one of them!

Today, there is a Moderately Critical security release for Drupal core to fix a vulnerability in jQuery. You can learn more in the security advisory:

Drupal core - Moderately Critical - Cross Site Scripting - SA-CORE-2020-002

Here you can download the Drupal 6 patch to fix, or a full release ZIP or TAR.GZ.

If you have a Drupal 6 site, we recommend you update immediately! We have already deployed the patch for all of our Drupal 6 Long-Term Support clients. :-)

FYI, there was another Drupal core security release made today (SA-CORE-2020-003) but that one doesn't affect Drupal 6.

If you'd like all your Drupal 6 modules to receive security updates and have the fixes deployed the same day they're released, please check out our D6LTS plans.

Note: if you use the myDropWizard module (totally free!), you'll be alerted to these and any future security updates, and will be able to use drush to install them (even though they won't necessarily have a release on Drupal.org).

We're Keeping Drupal 7 Alive for (at least!) 1639 More Days!

by Elliot Christenson on May 7, 2020 - 12:06am

Worldwide, we are obviously in very uncertain times. Jobs are changing, health is changing, work is changing, organizations are changing - but wouldn't it be great if Drupal could sort of just stay the same?

Wouldn't it be great if you could count on your amazing Drupal 7 site to carry you through to whatever is next? Whenever that might be? You can!

We can care for your Drupal website while you care for what matters.

by Elliot Christenson on April 1, 2020 - 10:37pm

Most of us have been caught under-prepared for the pandemic. You're capable of handling your Drupal website - no problemo! However, the safety of your family, friends, and community is your current priority. During this period, don't forget that myDropWizard can help with all of your support and maintenance needs for Drupal 6, 7 and 8. We have three great plans to cover all your potential Drupal needs.

Drupal 6 security update for CKEditor module

by David Snopek on March 18, 2020 - 3:22pm

As you may know, Drupal 6 has reached End-of-Life (EOL) which means the Drupal Security Team is no longer doing Security Advisories or working on security patches for Drupal 6 core or contrib modules - but the Drupal 6 LTS vendors are and we're one of them!

Today, there is a Moderately Critical security release for the CKEditor module to fix a Cross Site Scripting (XSS) vulnerability.

The CKEditor module provides one way to integrate CKEditor into Drupal.

Due to the usage of the JavaScript eval() function on non-filtered data in the admin section, it was possible for a user with permission to create content visible in the admin area to inject specially crafted malicious script.

The problem existed in CKEditor module for Drupal, not in JavaScript libraries with the same names, however, it's highly recommended that you update to the latest version of the CKEditor JavaScript library as well, because it also recently fixed some XSS vulnerabilities.

See the security advisory for Drupal 7 for more information.

Here you can download the Drupal 6 patch or the full release.

If you have a Drupal 6 site using the CKEditor module, we recommend you update immediately! We have already deployed the patch for all of our Drupal 6 Long-Term Support clients. :-)

If you'd like all your Drupal 6 modules to receive security updates and have the fixes deployed the same day they're released, please check out our D6LTS plans.

Note: if you use the myDropWizard module (totally free!), you'll be alerted to these and any future security updates, and will be able to use drush to install them (even though they won't necessarily have a release on Drupal.org).

Popular topics

Subscribe to Blog on Drupal 7-8 Support and Maintenance + Drupal 6 Long-Term Support: myDropWizard

We're a Top 40 Drupal Blog!

o