[10290] in Security FYI
[IS&T Security-FYI] Upcoming Drupal security announcement
daemon@ATHENA.MIT.EDU (Garry P Zacheiss)
Fri Mar 23 13:10:23 2018
From: Garry P Zacheiss <zacheiss@mit.edu>
To: security-fyi <security-fyi@mit.edu>, security_sig <security_sig@mit.edu>,
itpartners <itpartners@mit.edu>, it-lead <it-lead@mit.edu>,
drupalcloud-clients <drupalcloud-clients@mit.edu>
Date: Fri, 23 Mar 2018 17:07:50 +0000
Message-ID: <57024263-561F-4AD7-96A1-CAD6F593D9CA@mit.edu>
Content-Language: en-US
MIME-Version: 1.0
Cc: ist-announce <ist-announce@mit.edu>
Content-Type: multipart/mixed; boundary="===============6526468010110088511=="
Errors-To: ist-security-fyi-bounces@mit.edu
--===============6526468010110088511==
Content-Language: en-US
Content-Type: multipart/alternative;
boundary="_000_57024263561F4AD796A1CAD6F593D9CAmitedu_"
--_000_57024263561F4AD796A1CAD6F593D9CAmitedu_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64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--_000_57024263561F4AD796A1CAD6F593D9CAmitedu_
Content-Type: text/html; charset="utf-8"
Content-ID: <1342AF301176B64D867D4A263ED4A4A5@prod.exchangelabs.com>
Content-Transfer-Encoding: base64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--_000_57024263561F4AD796A1CAD6F593D9CAmitedu_--
--===============6526468010110088511==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
ist-security-fyi mailing list
ist-security-fyi@mit.edu
To Unsubscribe http://mailman.mit.edu/mailman/listinfo/ist-security-fyi
--===============6526468010110088511==--
