Assessment of May 8 Drupal Security update SA-CORE-2019-007

Assessment of May 8 Drupal Security update SA-CORE-2019-007
John Locke
Wed, 05/08/2019 - 14:12

New versions of Drupal core dropped today, to fix a file handling issue.

After assessing the patches, statements, and risks associated with this update, we have decided this is an important update to apply, but not urgent for most of the sites we manage.

Exploitation of the flaw takes two things:

Drupal
Drupal Planet
Security

Original Article: