 making your site secure what are security updates  any software occasionally has bugs and sometimes these bugs have security implications when security bugs are fixed in the core software modules or themes that your site uses they are released in a security update  you will need to apply security updates in order to keep your site secure what are security advisories  a security advisory is a public announcement about a reported security problem in the core software contributed projects with a shield icon and stable releases for this project are covered by the security advisory policy on their project page are also covered by drupal s security advisory policy security advisories are managed by the drupal security team  security tasks keeping track of updates updating the core software and updating contributed modules and or themes are all part of keeping your site secure see the related topics listed below for specific tasks additional resources security and maintenance drupal user guide  security advisory process and permissions policy 