[CM] Drupal 7 compromised, vuln disclosure/management procedure criticized too

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!nntp.club.cc.cmu.edu!feeder.erje.net!eu.feeder.erje.net!weretis.net!feeder1.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From	RS Wood <rsw@therandymon.com>
Newsgroups	comp.misc, comp.lang.php
Subject	[CM] Drupal 7 compromised, vuln disclosure/management procedure criticized too
Followup-To	comp.lang.php
Date	Mon, 3 Nov 2014 20:30:23 +0000 (UTC)
Organization	solani.org
Lines	13
Message-ID	<m38okv$6lv$1@solani.org> (permalink)
Content-Type	text/plain; charset=UTF-8
X-Trace	solani.org 1415046623 6847 eJwFwQEBwDAIAzBL46Uw7AyofwlPiLDo9GA4RV07JQgdM2b+9LjXWThlHWkENqd6sfoO+AMTYBCq (3 Nov 2014 20:30:23 GMT)
X-Complaints-To	abuse@news.solani.org
NNTP-Posting-Date	Mon, 3 Nov 2014 20:30:23 +0000 (UTC)
X-User-ID	eJwFwYEBwDAEBMCV1PNhHBL2H6F3Dn68x+g0X1+bIB7lKZjVVzGKtC6cVLFuD9uueCoyE/IDERUQxw==
Cancel-Lock	sha1:AZItxTZhCTM+mOL6VndKH9CIvBw=
X-NNTP-Posting-Host	eJwFwQkBwDAIA0BLKSMU5IzPv4Te8bNjddVoyuUmOyNK1lx9zuZoIPFLxTTYC0e2ilouEfcBLUkRZw==
Xref	csiph.com comp.misc:5531 comp.lang.php:14450

Cross-posted to 2 groups.

Followups directed to: comp.lang.php

Show key headers only | View raw

From the «sad blue waterdrop» department:
Title: Drupalgeddon megaflaw raises questions over CMS bods' crisis mgmt
Author: John Leyden
Date: Mon, 03 Nov 2014 06:43:07 -0500
Link: http://go.theregister.com/feed/www.theregister.co.uk/2014/11/03/drupal_drupalgeddon_analysis/

Fallout spreads as securobods issue warnings

The security world has been shocked to its foundations following ominous
warnings that millions of Drupal websites that didn't apply a critical patch
within hours of its release earlier this month should be regarded as hopelessly
compromised.…

Back to comp.lang.php | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

[CM] Drupal 7 compromised, vuln disclosure/management procedure criticized too RS Wood  <rsw@therandymon.com> - 2014-11-03 20:30 +0000
  Re: [CM] Drupal 7 compromised, vuln disclosure/management procedure criticized too Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-03 15:55 -0500

csiph-web