These posts by the Drupal security team are also sent to the security announcements e-mail list.

Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-003

Drupal 8.3.4 and Drupal 7.56 are maintenance releases which contain fixes for security vulnerabilities.

Drupal Core - Critical - Access Bypass - SA-CORE-2017-002

Drupal Core - Multiple Vulnerabilities - SA-CORE-2017-001

Drupal 8.2.7, a maintenance release which contains fixes for security vulnerabilities, is now available for download.

Drupal Core - Highly Critical - Injection - SA-CORE-2016-003


Subscribe with RSS Subscribe to RSS - Security advisories for Drupal core