Original release date: February 24, 2016
Drupal has released updates to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected website.
Available updates include:
- Drupal core 6.38 for 6.x users
- Drupal core 7.43 for 7.x users
- Drupal core 8.0.4 for 8.0.x users
Users and administrators are encouraged to review Drupal’s Security Advisory and apply the necessary updates.
Source: US CERT Alerts