Issue 661 - December, 5th 2024

While I was off for the Thanksgiving holiday last week we had some important security releases for Drupal. Make sure you have reviewed these if you haven't done so already.

If you enjoy this newsletter I'd appreciate it if you shared it with your friends and colleagues.

~ Bob Kepford - Editor

Headlines

Nominate Someone for the 2025 Aaron Winborn Award

Drupal Association Blog: Join the Party & Help Us Launch Drupal CMS in Style

Drupal Association Blog: See Your Design in Print - Enter the DrupalCon Atlanta T-Shirt Contest

Drupal Core - Critical - Cross Site Scripting - SA-CORE-2024-005

Security Advisories: Drupal Core - Less Critical - Gadget Chain - SA-CORE-2024-006

Security Advisories: Drupal Core - Moderately Critical - Access Bypass - SA-CORE-2024-004

Security Advisories: Drupal Core - Moderately Critical - Gadget Chain - SA-CORE-2024-007

Security Advisories: Drupal Core - Moderately Critical - Gadget Chain - SA-CORE-2024-008

From Our Sponsor

Core

Improve Performance by Preventing Unnecessary Scanning of Procedural Hooks

New API for Icon Management

New Config Action to Add Blocks to Navigation

The Node Type Creation Form No Longer Adds a Body Field

Articles

Automate Maintenance, Humanize Support

Extend Your Drupal 7 Site’s Life Beyond January 2025 with Tag1 Consulting!

Whether you’re a small business or a large enterprise, Tag1’s D7ES provides tailored extended support solutions that fit your unique needs. We offer month-to-month and annual options with no long-term commitment, ensuring your site stays secure and functional without any hassles. Explore our flexible plans today, and see how we can help you beyond EOL

Introducing the New ChatGPT-Powered Drupal Answers Portal | Mark Conroy

The Web APIs Powering the Drupal CMS Trial Experience

Web Wash: First Look at Drupal CMS (Drupal Starshot)

Tutorials

Brian Perry: Two Modules to Help Tame Large Drupal Menus

Is 2025 Your Year to Bolster Your Drupal Abilities?

Is 2025 your year to bolster your Drupal abilities? Then check out DrupalEasy’s live, online Professional Module Development course. It starts the end of January and meets twice per week. The PMD focuses on code quality, automated testing, and sustainable development practices. Two versions, a comprehensive and a lite format, ensure you have access to the level of training that best meets your needs to build skills and confidence.

Matt Glaman: Restrict Composer Dependency Updates to Only Patch Releases

Simon's Blog: Drupal Settings.php Snippets for Debug

Releases

Ddev v1.24.0: PHP8.4.1, Stasadev Birthday Release!

Drupal 10.2.11

Drupal 10.3.10

Drupal 10.3.9

Drupal 10.4.0-Rc1

Drupal 11.0.8

Drupal 11.0.9

Drupal 11.1.0-Rc1

Drupal 7.102

Lando v3.23.15

migrate_plus 6.0.5

Spammaster 8.x-2.52

stage_file_proxy 3.1.4

title_html 2.0.2

Podcasts

Episode 61 – Crafting Authentic and Impactful Thought Leadership with Lyz Nagan

Talking Drupal #477 - Drupal Association CTO Then & Now

Talking Drupal #478 - WEBAssembly