Menu

Drupal News

Supporting the next evolution of Drupal’s Community Governance

April 21st, 2017

TL;DR: Both the community and Dries Buytaert, Project Lead, see a need to evolve Drupal community governance. The Drupal Association can help in a support role. We will start by hosting mediated community discussions so everyone around the world can participate, be heard and understood, and share their ideas. Creating a new governance model will…

Drupal Core – Critical – Access Bypass – SA-CORE-2017-002

April 19th, 2017

Advisory ID: DRUPAL-SA-CORE-2017-002 Project: Drupal core Version: 8.x Date: 2017-April-19 CVEID: CVE-2017-6919 Security risk: 17/25 ( Critical) AC:Basic/A:User/CI:All/II:All/E:Theoretical/TD:Default Vulnerability: Access bypass Description This is a critical access bypass vulnerability. A site is only affected by this if all of the following conditions are met: The site has the RESTful Web Services (rest) module enabled. The…

What’s new on Drupal.org? – March 2017

April 18th, 2017

Read our Roadmap to understand how this work falls into priorities set by the Drupal Association with direction and collaboration from the Board and community. The Drupal Association team is gearing up for DrupalCon Baltimore. We’re excited to see you there and we’ll presenting a panel giving an update on our work since Dublin, and…

Drupal 8 core upcoming critical release PSA-2017-001

April 17th, 2017

Advisory ID: DRUPAL-PSA-2017-001 Project: Drupal core Version: 8.x Date: 2017-Apr-17 Description There will be a security release of Drupal 8.3.x and 8.2.x on April 19th 2017 between 17:00 – 18:00 UTC that will fix a critical vulnerability. While we don’t normally provide security releases for unsupported minor releases, given the potential severity, we will provide…

Technical Advisory Committee Update

April 11th, 2017

In October of last year the Technical Advisory Committee was formed to evaluate options for the developer tools we use on Drupal.org. The TAC consists of Angie Byron, Moshe Weitzman, and Steve Francia, acting as advisors to Megan Sanicki, the Executive Director of the Drupal Association. The TAC’s mandate is to recommend a direction for…

Drupal 8.3.0 is now available

April 6th, 2017

Drupal 8.3.0, the third minor release of Drupal 8, is now available. With Drupal 8, we made significant changes in our release process, adopting semantic versioning and scheduled feature releases. This allows us to make extensive improvements to Drupal 8 in a timely fashion while still providing backwards compatibility. What’s new in Drupal 8.3.0? This…

Working through the concerns of our community

March 31st, 2017

This is a joint statement from project lead Dries Buytaert and Megan Sanicki, Drupal Association Executive Director. Over the last week, the Drupal community has been in a debate over the various decisions made by us in relation to long-time Drupal developer Larry Garfield. As with any such decisions, and especially due to the circumstances…

2017 Drupal Association at-large election winner announced

March 27th, 2017

The staff and board of the Drupal Association would like to congratulate our newest board member: Ryan Szrama. Thank you, Ryan, for stepping forward to serve the Drupal community. On behalf of the community I also want to thank the 13 candidates who put themselves out there in service of Drupal and nominated themselves. We are…

A Statement from the Executive Director

March 24th, 2017

We understand that there is uncertainty and concern in the Drupal community about project founder, Dries Buytaert, asking Larry Garfield to leave the Drupal community, and about the Drupal Association removing Larry’s DrupalCon sessions and ending his term as track chair. We want to be clear that the decision to remove Larry’s DrupalCon session and…

Goodbye Project Applications, Hello Security Advisory Opt-in

March 18th, 2017

Any user on Drupal.org who has accepted our Git usage policy may now create full projects with releases. This is a big change in policy for the Drupal project, representing an evolution of the contribution ecosystem in the past half a decade. What was the Project Application Process? Ever since the days when Drupal’s code…

Page 1 of 4512345...Last »