Drupal: last core version update. Risky, if I don't update it ?

Question

hi,

I did several websites with Drupal, and now the core is updated and I cannot come back to my customers to update previous installation. I was wondering how risky is to not update drupal core to the last version and how web developers should deal with websites management.

ps. My customers do not have any computer skills.

thanks

Answer 1

Here are release notes. Answer on your question lies inside.

Answer 2

The openness of open source means that it is easy to know what an upgrade has fixed. It also means that a hacker could just look at the release notes and do a diff between the previous and current version to spot the vulnerabilities in the previous version.

If you have a good relationship with your clients I would explain the need for an upgrade and see if they want to pay you for it, as their sites are vulnerable to anyone determined enough to look at the release notes and do a little digging.

Answer 3

Updating the core is very Important, it solves some security risks and brings new features.