Communication Channels
All security reports against Drupal 7 core and contribution projects must still be reported via security.drupal.org first!
D7Security
The D7Security group provides unofficial extended support Drupal 7. We are working on Drupal 7 Long Term Support (LTS) to continue security and maintenance updates for Drupal Core and contributed projects now that Drupal 7 will reach end of life (EOL) on Drupal.org.
Mission, Values and Philosophy
The mission of the D7Security group is to provide extended support for selected Drupal 7 modules and themes.
This is an unofficial effort independent from drupal.org
How D7Security works
The Drupal Security Team has announced in PSA-2023-06-07 that unsupported Drupal 7 modules/themes cannot be supported again on drupal.org. That is a problem for Drupal 7 maintainers and contributors, as they don't have a shared space where they can collaborate and publish security fixes for those Drupal 7 projects.
After a discussion on drupal.org a group of contributors decided to create the unofficial D7Security group on Gitlab.com, where they can publish new releases for unsupported drupal.org projects. D7Security is an open source project where members from multiple companies collaborate on keeping Drupal 7 projects supported.
To participate as Drupal 7 site owner follow our user guide and install the d7security_client module .
Drupal 7 will reach End of Life
There are various options for D7 site owners. The Drupal 7 Soft Landing Initiative provides good guidance on this!