How to quickly patch your Drupal site for the Highly Critical security release ( SA-CORE-2018-002 )

Do you manage a Drupal site? You are likely to have heard about today's highly critical security update: https://www.drupal.org/sa-core-2018-002

There's no time to spare - what now?

Note: in the below examples, the patches are tested when 'x' in the version number is the highest available number. It is likely to work at slightly lower versions as well, but no guarantees either way. That's why we back up our sites before any update.

Here's the quick & dirty way to patch your site:

• If your site is 8.5.x
• If your site is 8.4.x
• If your site is 8.3.x
• If your site is 7.x
• If your site is 6.x

This comes with no warranty, implied or otherwise.

Those steps will allow you to patch your site, not fully update it. Once the patches are in, you can rest assured that your site should now be secure. Take 24 hours off, then schedule fully updating your website to the latest version in the near future.