Software Update: Drupal 6.16 / 5.22

On Wednesday, new maintenance releases of Drupal were released, namely versions 6.16 and 5.22. Drupal is a development package written in PHP that allows users to manage, organize and publish content. It contains many features that can be found in, for example, content management systems, weblogs and forums. An extensive description of all options is available on this page to find. No new capabilities have been added in this release, they will be kept for version 7.0. However, some bug fixes have been implemented and a security hole has been closed. More information about this can be found in the release notes:

Drupal 6.16 and 5.22 releasedDrupal 6.16 and 5.22, maintenance releases which fix issues reported through the bug tracking system, as well as security vulnerabilities, are now available for download. Drupal 6.16 also fixes other smaller issues.

Upgrading your existing Drupal 5 and 6 sites is strongly recommended. There are no new features in these releases. For more information about the Drupal 6.x release series, consult the Drupal 6.0 release announcement, more information on the 5.x releases can be found in the Drupal 5.0 release announcement. Drupal 5 will no longer be maintained when Drupal 7 has been released. Upgrading to Drupal 6 is recommended.

changelog

The full list of changes between the 6.15 and 6.16 releases can be found by reading the 6.16 release notes. A complete list of all bug fixes in the stable DRUPAL-6 branch can be found at http://drupal.org/project/cvs/3060/?branch=DRUPAL-6.

The full list of changes between the 5.21 and 5.22 releases can be found by reading the 5.22 release notes. A complete list of all bug fixes in the stable DRUPAL-5 branch can be found at http://drupal.org/project/cvs/3060/?branch=DRUPAL-5.

Security vulnerabilities

Drupal 5.22 and 6.16 were released in response to the discovery of security vulnerabilities. Details can be found in the official security advisory:

• SA-CORE-2010-001

To fix the security problem, you can either (1) upgrade Drupal or (2) patch Drupal.

We strongly recommend you do a full upgrade (which is also detailed in the security announcement) as the patches do not contain the additional bug fixes that went into the releases. Applying the patches will leave your site in an unversioned state and confuse the update status module, which will keep reminding you to upgrade to 6.16 or 5.22. Please read the announcement for details on the patch.

If you still prefer to patch Drupal, apply the http://drupal.org/files/sa-core-2010-001/SA-CORE-2010-001-6.15.patch file to your Drupal 6.15 codebase or http://drupal.org/files/sa-core-2010-001/SA-CORE-2010-001-5.21.patch to your Drupal 5.21 codebase.