D

rupal 6.4 and Drupal 5.10, maintenance releases fixing problems reported using the bug tracking system, as well as critical security vulnerabilities, are now available for download.

Upgrading your existing Drupal 5 and 6 sites is strongly recommended. There are no new features in these releases. For more information about the Drupal 6.x release series, consult the Drupal 6.0 release announcement, more information on the 5.x releases can be found in Drupal 5.0 release announcement.

Drupal 6.4 and 5.10 were released in response to the discovery of security vulnerabilities. Details can be found in the official security advisory:

• SA-2008-047

To fix the security problems, you can either (1) upgrade Drupal or (2) patch Drupal.

We recommend you do the full upgrade (which is also detailed in the security announcement) as the patches do not contain the additional bugfixes that went into the release. Applying the patches will leave your site in an unversioned state and confuse update status module, which will keep reminding you to upgrade to 6.4 or 5.10. Please read the announcement for details on the patches.

If you still prefer to patch Drupal, apply the http://drupal.org/files/sa-2008-047/SA-2008-047-6.3.patch file to your Drupal 6.3 code base or http://drupal.org/files/sa-2008-047/SA-2008-047-5.9.patch to your Drupal 5.9 codebase.

Happy Publishing!

Join Hiveminds and link to your website or blog.