<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoPlainText">Good afternoon,</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Earlier this week, it was announced that a significant security vulnerability in the Drupal content management system will be made public on March 28th, 2018:</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><a href="https://www.drupal.org/psa-2018-001">https://www.drupal.org/psa-2018-001</a></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">While no additional details are available at this time, it is expected this issue will impact all currently deployed versions of Drupal.</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Drupal is a widely deployed technology at MIT, and Information Systems & Technology (IS&T) is taking steps to prepare for the release of additional information about this issue:</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">- Web sites deployed via IS&T's Drupal Cloud service will be patched to address this vulnerability on March 28th; no additional action is required on the part of Drupal Cloud site administrators.</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">- Drupal sites hosted via IS&T's managed server hosting will likewise be secured against this vulnerability. Configuration for these sites is more diverse than Drupal Cloud, and IS&T will reach out to hosting customers to discuss specifics
as additional details become available.</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">For Drupal sites at MIT not managed by IS&T or those hosted externally, we strongly recommend following up with your support provider to discuss options for securing your site once patches are available. Maintainers of Drupal sites
not hosted by IS&T should plan to dedicate time on March 28th for patching and testing their site, and may wish to ensure prior to that time that the site is up to date on Drupal core patches.</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">If you have any questions or require assistance, please contact the
<a href="mailto:servicedesk@mit.edu">IS&T Service Desk</a>.</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Sincerely,</p>
<p class="MsoPlainText">Garry</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Garry Zacheiss</p>
<p class="MsoPlainText">Director, Platform & Systems Integration</p>
<p class="MsoPlainText">MIT Information Systems & Technology</p>
<p class="MsoPlainText"><a href="mailto:zacheiss@mit.edu">zacheiss@mit.edu</a> // +1 617 253 7675</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
</div>
</body>
</html>