SA-CONTRIB-2016-047 - Infrastructure Hardening
Incident Report for amazee.io
Resolved
The Drupal security team released a new version of the Drupal 7 Panels Contrib module which includes a security patch for a CRITICAL security issue: https://www.drupal.org/node/2785631

As every Drupal 7 site with Panels is affected and there are no mitigation actions for this security issue, we decided to roll out infrastructure hardening in order to reduce the attack vector for this security issue.

This hardening is not able to completely protect Drupal 7 sites with Panels installed, but it makes it harder for an attacker to attack a site.

The amazee.io team suggest everybody to update their panels version to 7.x-3.6 as soon as possible.
Posted Aug 18, 2016 - 00:49 UTC