Issue 336 - April, 26th 2018

News

Drupal Core - Critical - Remote Code Execution - SA-CORE-2018-004

This vulnerability is already being exploited so hopefully you already patched your site.

Media - Critical - Remote Code Execution - SA-CONTRIB-2018-020

The Media module has multiple security releases for the various branches currently supported.

Drupal Core - Moderately Critical - Cross Site Scripting - SA-CORE-2018-003

"CKEditor, a third-party JavaScript library included in Drupal core, has fixed a cross-site scripting (XSS) vulnerability. The vulnerability stemmed from the fact that it was possible to execute XSS inside CKEditor when using the image2 plugin (which Drupal 8 core also uses)."

D6LTS Patch for SA-CORE-2018-004

If you still manage a Drupal 6 site you should apply this patches to your site.

Drupal Core Announcements: Have Your Say in Where Drupal 8 Is Going by Participating in Key Initiatives

From Our Sponsor

DrupalCon

Decoupled Drupal Summit at DrupalCon Nashville

Experience Express in Nashville: Decoupled in the Spotlight at DrupalCon

Summary of decoupled Drupal related things.

A Farewell to Twig - DrupalCon Session

Though this is a click-bait like session title the talk and discussion is well worth watching.

API-First Initiative - DrupalCon Session

Lessons in Leadership from DrupalCon Nashville

Think Your Website Is GDPR Compliant? Think Again! - DrupalCon Session

You Matter More Than the Cause - DrupalCon Session

Very important session by Jeff Eaton.

Articles

Security Vulnerabilities Affect Your Dev Sites Too

Drupalgeddon 2 Drupal Vulnerability Exploiting Botnets Emerge

How Popular Is Decoupled Drupal?

"These figures and graphs seem to confirm that decoupled Drupal is rapidly gaining popularity, although Drupal 8 usage still has not reached Drupal 7 level."

Kevin Thull, from Behind the Camera

"This year at DrupalCon Nashville the Drupal Community awarded Kevin the Aaron Winborn award. The Aaron Winborn award is presented annually to an individual who demonstrates personal integrity, kindness, and above-and-beyond commitment to the Drupal community."