News

We've just published a minor update to the paper. You can see the new version, 1.1, at http://drupalsecurityreport.org/about-drupal-security-report.

The changes in this version from the 1.0 publication in April include:

  • Updated sponsor text and images
  • License clarification
  • SA data expanded to include 2010 (through March 24) and 2005
  • Modifications for grammar and wording throughout

Check out the new release at http://drupalsecurityreport.org/about-drupal-security-report and thanks to our reviewers and those who provided feedback.

The Drupal Security Report is licensed under a Creative Commons, Attribution-No Derivatives license. We did this consciously and for several reasons that we wanted to share.

Protecting the credit for our sponsors

We're sitting here in the lounge of the Moscone center at Drupalcon San Francisco. Ben and I have just reached the end of a long journey and are feeling pretty happy.

About 6 months ago we began discussing the need within the Drupal community for a well researched and well written, concise document that could address the ongoing questions about security in Drupal.

And now, thanks to the support of great sponsors and numerous reviewers, we feel confident putting the 1.0 stamp on the report.

Sponsors