Repository navigation
1.34.6
Security release for Backdrop CMS. This release fixes 3 security vulnerabilities:
This release also changes the default password policy from "weak" to "strict", requiring more stringent user passwords on new installs.
Site owners are encouraged to update to Backdrop 1.35.2 instead of this release if possible, as it also addresses includes additional security hardening and fixes a vulnerability in CKEditor 5 that cannot be easily back-ported to the 1.34.x releases.
Notes for updating
No changes have been made to the .htaccess, robots.txt or default settings.php files in this release. Updating customized versions of those files is not necessary.
It will be necessary to run the update script (located at /core/update.php) for this release.