Drupal 6, 7 & 8 highly critical security updates

Mar 28, 16:07 PDT
Completed – The scheduled maintenance has been completed.

Mar 28, 13:34 PDT
Verifying – Pantheon has made the update to SA-CORE-2018-002 [1] available on site dashboards as a one-click update [2]. If you have a site on a custom upstream or are running into merge conflicts, we recommend applying a patch first [3] and working out merge conflicts later.

We also have implemented platform-wide logging and a mitigation we believe will prevent common exploitation paths. Sites should still immediately update to ensure safety. We will post a follow up with any findings from our logging in 24 hours.

[1] – https://www.drupal.org/SA-CORE-2018-002

[2] – https://pantheon.io/docs/upstream-updates/

[3] – https://pantheon.io/docs/drupal-security-patches

Mar 28, 08:08 PDT
Scheduled – Drupal.org is scheduled to release highly critical security updates for Drupal 7 & 8 today between 11am and 12:30pm Pacific [1]. Updates to Drupal 6 will be released shortly thereafter [2]. Pantheon will make the updates available for one-click update in site dashboards as soon as possible and will provide status updates as necessary. Instructions for applying core updates can be found in our Support Center [3].

[1] – https://www.drupal.org/psa-2018-001

[2] – https://www.drupal.org/project/d6lts/issues/2955130

[3] – https://pantheon.io/docs/upstream-updates/

Source: http://status.pantheon.io/history.rss