Original release date: November 20, 2014

Drupal has released an advisory to address multiple vulnerabilities in Drupal core 6.x versions prior to 6.34 and Drupal core 7.x versions prior to 7.34, one of which could allow a remote attacker to cause a denial of service.

US-CERT encourages users and administrators to review Drupal’s Security Advisory and apply the necessary updates.

This product is provided subject to this Notification and this Privacy & Use policy.