[Security-news] Drupal 7 End of Life - PSA-2025-01-06

[security-news at drupal.org]

View online: https://www.drupal.org/psa-2025-01-06

Date: 2025-January-06
Description: 
Drupal core version 7 has reached end of life, and is no longer community
supported on Drupal.org. This means that new releases of Drupal 7 core and
contributed projects will no longer happen on Drupal.org and community
support is no longer provided.

*What this means for you:*

   1) Any vulnerabilities that impact Drupal 7 may be released and made public
      without Security Advisories or warnings.  Please continue to follow the
      process outlined in:  Report a security issue [1]
   2) Drupal 7 will no longer be supported. There will be no more core commits
      on Drupal 7.x to the official repository. The community will no longer 
be
      creating new Drupal 7 releases, fixing bugs in existing projects, 
writing
      documentation, etc. around Drupal 7.
   3) The Drupal Security Team will no longer provide support or Security
      Advisories for Drupal 7 and Drupal-7-compatible contributed projects.
   4) All Drupal 7 releases on project pages will be flagged as not supported.
      At some point in the future, update status and packages.drupal.org/7 
will
      stop working for Drupal 7 sites.


*Solution:*
You can  learn about upgrading Drupal and migrations [2] or read about other
options [3].


[1]
https://www.drupal.org/docs/develop/issues/issue-procedures-and-etiquette/reporting-a-security-issue
[2] https://www.drupal.org/about/drupal-7/d7eol/diy
[3] https://www.drupal.org/about/drupal-7/d7eol