Drupal core SA-CORE-2019-004 Cross Site Scripting vulnerability

A new Drupal version was released recently to address a security issue. Under certain circumstances, the File module/subsystem allows a malicious user to upload a file that can trigger a cross-site scripting (XSS) vulnerability. You can find more information at SA-CORE-2019-004.

For new application deployments, including those performed through the Bitnami Launchpad, we have released Drupal 8.6.13 and 7.65 for containers, installers, virtual machines, cloud images, and Multi-Tier solutions. We also updated the Drupal based solutions (CiviCRM and OpenAtrium). If you deploy any of these solutions and they have not yet been updated to the latest version, you will need to follow the upgrade process described in our documentation.

If you have further questions about this security issue, please post to our community forum, where we will be happy to help.

Drupal 8.6.10 security release

Drupal has released a new version that fixes a highly critical security vulnerability. This security vulnerability can affect your Drupal 8 and 7 sites.

SA-CORE-2019-003 can lead to arbitrary PHP code execution if one of the following conditions is met:

• The site has the Drupal 8 core RESTful Web Services (rest) module enabled and allows PATCH or POST requests. 
• The site has another web services module enabled, like JSON:API in Drupal 8, or Services or RESTful Web Services in Drupal 7.

Learn more about this vulnerability in the Drupal official announcement.

Bitnami images are not affected since none of our solutions meet the conditions above, but it is recommended to upgrade your Drupal application to Drupal 8.6.10 or later. You can follow our documentation to learn how to upgrade your application to strengthen its security. We highly recommend creating a backup before performing the upgrade.

For new application deployments, including the Bitnami Launchpad ones, we have released Drupal 8.6.10 for containers, installers, virtual machines, cloud images, and Multi-Tier solutions. If you deploy any of these solutions and they have not yet been updated to the latest version, you will need to follow the upgrade process described in our documentation.

If you have further questions about this security issue, please post to our community forum, where we will be happy to help.

Drupal 8.6.7 and 7.63 critical security releases

Drupal has released new versions that fix critical security vulnerabilities. We strongly recommend that you upgrade your existing Drupal 7 and 8 sites.

This security release includes two vulnerabilities separated into two different advisories:

• SA-CORE-2019-001: An update of the third-party PEAR Archive_Tar library that recently released a security update. 
• SA-CORE-2019-002: A remote code execution vulnerability when performing file operations on an untrusted phar:// URI.

You can learn more about these vulnerabilities in the Drupal official announcements. It is suggested that you upgrade your Drupal application to Drupal 7.63 or later, and Drupal 8.6.7 or later. You can follow our documentation to learn how to upgrade your application to strengthen its security. We highly recommend creating a backup before performing the upgrade.

For new application deployments, including those made from the Bitnami Launchpad, we released Drupal 7.63 and 8.6.7 versions for containers, installers, virtual machines, cloud images, and Multi-Tier solutions. We also updated the Drupal based solutions (CiviCRM and OpenAtrium). These include all the necessary fixes to address the vulnerabilities listed above. If you deploy Bitnami any of those applications and it is not yet updated to the latest version, you will need to upgrade by following our documentation.

If you have further questions about this security issue, please post to our community forum, where we will be happy to help.

Drupal 8.6.2 and 7.60 critical releases (SA-CORE-2018-006)

Drupal has released new versions that fix several critical security vulnerabilities. We strongly recommend upgrading your existing Drupal 7 and 8 sites.

The fixed vulnerabilities are listed below:

• Content moderation - Moderately critical - Access bypass - Drupal 8
• External URL injection through URL aliases - Moderately Critical - Open Redirect - Drupal 7 and Drupal 8
• Anonymous Open Redirect - Moderately Critical - Open Redirect - Drupal 8
• Injection in DefaultMailSystem::mail() - Critical - Remote Code Execution - Drupal 7 and Drupal 8
• Contextual Links validation - Critical - Remote Code Execution - Drupal 8

It is recommended that you upgrade your Drupal application to Drupal 7.60 and Drupal 8.6.2. We highly recommend creating a backup before proceeding. You can follow our Drupal, CiviCRM or Open Atrium documentation to learn how to upgrade your application and address this security issue.

For new application deployments, including those through the Bitnami Launchpad, we released Drupal 7.60 and 8.6.2, CiviCRM and Open Atrium containers, installers, virtual machines and cloud images that include the necessary fix to address these vulnerabilities.

If you have further questions about Bitnami Drupal or this security issue, please post to our community forum, where we will be happy to help.

Drupal 8.5.3 and 7.59 highly critical releases (SA-CORE-2018-004)

[Note] Open Atrium (a Drupal distribution) and CiviCRM (CMS integration with Drupal) are also affected by this vulnerability. Make sure that your deployment is updated to the latest version.

--

Drupal has released a new version that fixes a highly critical security vulnerability. We strongly recommend upgrading your existing Drupal 7 and 8 sites.

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.

It is recommended that you upgrade your Drupal application to Drupal 7.59 or later and Drupal 8.5.3 or later. We highly recommend creating a backup before proceeding. You can follow our documentation to learn how to upgrade your application and ensure its security.

If you are unable to update immediately and have advanced Drupal administration skills, you may opt to patch your systems until such time as you are able to completely update. The Drupal community has provided patches which can be applied using the following procedure:

1. Move to Drupal directory (assuming /opt/bitnami/ as installdir):
cd /opt/bitnami/apps/drupal/htdocs/

2. Download the correct patch for your system based on the version of Drupal in use.

- For Drupal 7.x:
wget -O drupal.patch 'https://cgit.drupalcode.org/drupal/rawdiff/?h=7.x&id=080daa38f265ea28444c540832509a48861587d0'

- For Drupal 8.5.x:
wget -O drupal.patch 'https://cgit.drupalcode.org/drupal/rawdiff/?h=8.5.x&id=bb6d396609600d1169da29456ba3db59abae4b7e'

3. Apply the patch:

sudo git apply /opt/bitnami/apps/drupal/htdocs/drupal.patch

4. Restart the Apache web server:

sudo /opt/bitnami/ctlscript.sh restart apache

Patching is a temporary solution until you find the time to perform a complete upgrade of your Drupal installation. These patches will only work if your site already has the fix from SA-CORE-2018-002 applied.

For new application deployments, including the Bitnami Launchpad, we are releasing Drupal 7.59 and 8.5.3 containers, installers, virtual machines and cloud images that include the fix to address this vulnerability. If you deploy Bitnami Drupal and it is not yet updated to its latest version, you will need to upgrade by following our documentation.

If you have further questions about Bitnami Drupal or this security issue, please post to our community forum, where we will be happy to help.

Drupal 8.5.1 and 7.58 highly critical releases

[Update] Open Atrium (a Drupal distribution) and CiviCRM (CMS integration with Drupal) are are also affected by this vulnerability. Make sure that your deployment is updated to the latest version.

--

Drupal has released a new version that fixes a highly critical security vulnerability. We strongly recommend upgrading your existing Drupal 7 and 8 sites.

The vulnerability fixed in the latest version of Drupal is the following:

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised. More information can be found on the Drupal website here: https://www.drupal.org/sa-core-2018-002

It is recommended that you upgrade your Drupal application to Drupal 7.58 or later and Drupal 8.5.1 or later. You can follow our documentation to learn how to upgrade your application and ensure its security.

If you are unable to update immediately, and have advanced Drupal administration skills you you may opt to patch your systems until such time as you are able to completely update. The Drupal community has provided patches which can be applied using the following procedure:

Download the correct patch for your system based on the version of Drupal in use.

For Drupal 7.x:

wget -O drupal.patch 'https://cgit.drupalcode.org/drupal/rawdiff/?h=7.x&id=2266d2a83db50e2f97682d9a0fb8a18e2722cba5'

For Drupal 8.5.x:

wget -O drupal.patch 'https://cgit.drupalcode.org/drupal/rawdiff/?h=8.5.x&id=5ac8738fa69df34a0635f0907d661b509ff9a28f'

2. Apply the patch:

sudo git apply /opt/bitnami/apps/drupal/htdocs/drupal.patch

3. Restart the Apache web server:

sudo /opt/bitnami/ctlscript.sh restart apache

Patching is a temporary solution until you find the time to perform a complete upgrade of your Drupal installation.

For new application deployments, including the Bitnami Launchpad, we are releasing Drupal 7.58 and 8.5.1 containers, installers, virtual machines and cloud images that include the fix to address this vulnerability. If you deploy Bitnami Drupal and it is not yet updated to its latest version, you will need to upgrade by following our documentation.

If you have further questions about Bitnami Drupal or this security issue, please post to our community forum, where we will be happy to help.

Security Release: Drupal 8.3.7

Drupal has released a new version that fixes three security vulnerabilities. These vulnerabilities affect Drupal versions prior to 8.3.7.

The vulnerabilities fixed in the latest version of Drupal (8.3.7) are the following:

• Entity access bypass for entities that do not have UUIDs or have protected revisions - Access Bypass - Critical - CVE-2017-6925
• Views - Access Bypass - Moderately Critical - CVE-2017-6923
• REST API can bypass comment approval - Access Bypass - Moderately Critical - CVE-2017-6924

It is recommended that you update your Drupal application to the Drupal 8.3.7. You can follow our documentation to learn how to upgrade your application and ensure its security.

For new application deployments, including the Bitnami Launchpad, we have released Drupal 8.3.7 containers, installers, virtual machines and cloud images that includes the security fixes to address these vulnerabilities. If you deploy Bitnami Drupal via one of our cloud partner marketplaces and it is not yet updated to version 8.3.7, you will need to upgrade your application using our documentation.

If you have further questions about Bitnami Drupal or this security issue, please post to our community forum, and we will be happy to help you.

Drupal Security Issue SA-CORE-2017-002

Drupal’s core security team has discovered a new critical security vulnerability in the RESTful Web Services (rest) module, SA-CORE-2017-002.

This module is not enabled by default in the Bitnami Drupal application. If you do not use the RESTful Web Services module, you do not need to take any action.

If you have the RESTful Web Services module enabled, your Drupal application is affected if all of the following conditions are met:

• The version of the application is prior to 8.3.1 (Drupal 7.x is not affected).
• The site allows PATCH requests.
• An attacker can get or register a user account on the site.

If your Drupal installation meets those requirements it is recommended to update your Drupal application to the latest version, Drupal 8.3.1. You can follow our documentation to learn how to upgrade your application and ensure its security.

For new application deployments, Bitnami has released Drupal 8.3.1 containers, installers, virtual machines and cloud images that address this vulnerability. If you deploy Bitnami Drupal via a Bitnami Launchpad, your application will be up-to-date and secure. If you deploy Bitnami Drupal via one of our cloud partner marketplaces and it is not yet updated to version 8.3.1, you will need to upgrade your application using the documentation linked above.

If you have further questions about Bitnami Drupal or this security issue, please post to our  community forums, and we will be happy to help you.

Drupal Security Issue SA-CONTRIB-2017-38

A new critical security vulnerability in the References module has been discovered by Drupal's core security team as SA-CONTRIB-2017-38. Although this module is no longer maintained, it is currently used within over 120,000 installations.

If you use the References module, it is advised to uninstall it. In order to maintain equivalent functionality, it is recommended to try the Entity Reference module. If you do not use the References module, you do not need to take any action.

The References module is only supported by Drupal 7.x versions. The Bitnami Drupal stack does not include the References module by default.  Therefore, it is not affected by this issue.

If you have further questions about Bitnami Drupal or this security issue, please post to our community forum, and we will be happy to help you.

Security Release: Drupal 8.2.7

Drupal has released a new version that fixes three security vulnerabilities.

It is recommended that you update your Drupal application to the latest version, Drupal 8.2.7. You can follow our documentation to learn how to upgrade your application and ensure its security.

The vulnerabilities fixed in the latest version of Drupal are the following:

• Editor module incorrectly checks access to inline private files - Access Bypass - Critical - CVE-2017-6377
• Some admin paths were not protected with a CSRF token - Cross Site Request Forgery - Moderately Critical - CVE-2017-6379
• Remote code execution - Moderately Critical - CVE-2017-6381

For new application deployments, Bitnami has released Drupal 8.2.7 containers, installers, virtual machines and cloud images that address these vulnerabilities. If you deploy Bitnami Drupal via a Bitnami Launchpad, your application will be up-to-date and secure. If you deploy Bitnami Drupal via one of our cloud partner marketplaces and it is not yet updated to version 8.2.7, you will need to upgrade your application using the documentation linked above.

If you have further questions about Bitnami Drupal or this security issue, please post to our community forum, and we will be happy to help you.

Security release: Drupal 6 and 7

The Drupal project released a new version that fixes several security issues; upgrading your existing Drupal 7 and 6 sites is strongly recommended.


The new version fixes:

• Cross-site Scripting - Ajax system - Drupal 7: A vulnerability was found that allows a malicious user to perform a cross-site scripting attack by invoking Drupal.ajax() on a whitelisted HTML element.
• Cross-site Scripting - Autocomplete system - Drupal 6 and 7: A cross-site scripting vulnerability was found in the autocomplete functionality of forms. The requested URL is not sufficiently sanitized.
• And other changes that you can check in the official security advisory. 

In response to the new version we have released Bitnami Drupal7 and 6 installers, virtual machines and Amazon EC2,Google, Azure, VMware and DigitalOcean cloud images that fix these issues. There are no new features or non-security related bug fixes in these releases.

You should patch your Drupal version as soon as possible. You can follow the step-by-step instructions via this blog post. Stated simply, you will need to ssh to your machine, ssh to the Drupal installation directory and execute drush.

$ cd /opt/bitnami/apps/drupal/htdocs
$ drush up

If everything goes well, you should see something similar to the following:

Project drupal was updated successfully. Installed version is now 7.39.
Backups were saved into the directory /home/bitnami/drush-backups/bitnami_drupal7/20150820155354/drupal.                  [ok]
No database updates required                               [success]
'all' cache was cleared.                                   [success]

Finished performing updates.                                    [ok]


Have questions about Bitnami Drupal? Post to our community forum, and we would be happy to help you. 

Security release: Drupal 6 and 7

The Drupal project released a new version that fixes several security issues; Upgrading your existing Drupal 7 and 6 sites is strongly recommended.

The new version fixes:

• A vulnerability found in the OpenID module that allows a malicious user to log in as other users on the site, including administrators, and hijack their accounts
• Other less critical issues 

In response to the new version we have released Bitnami Drupal 7 and 6 installers, virtual machines and Amazon EC2, Google, Azure, and VMware cloud images that fix these issues. There are no new features or non-security-related bug fixes in these releases.

Have questions about Bitnami Drupal? Post to our community forum, and we would be happy to help you.  Or click here for a complete overview by the The Drupal Security Team.

Bitnami Open Source Leaders Interview Series: Larry Garfield from Drupal

Bitnami interviewed one of Drupal’s core contributors, Larry Garfield, for an inside look into the future of Drupal. With over 1 million active users it's easy to understand why Drupal is one of our most popular PHP solutions for content management, and why this application keeps evolving.

If you are just getting started or already a big fan of Drupal, this interview will give you some great insight into how Drupal maintains their community and what the future looks like for this application.

In the interview, Larry explains:

• Who uses Drupal 
• How to get involved 
• What new features we should expect 

After learning more about the project, you can launch Drupal to the cloud or deploy it locally with free installers, virtual machines and cloud templates from Bitnami. Get started in the cloud for free with a $200 credit from Microsoft Azure.

Stuart Langridge:       These are the Bitnami Open Source Leaders Series of Interviews.  I'm Stuart Langridge, and I'm talking to Larry Garfield, who's a long-time Drupal core contributor. He's web services initiative lead for Drupal 8 and he's basically the de facto Drupal ambassador to the PHP world. Hi, Larry. Welcome to the podcast.

Larry Garfield:           Hello.

Stuart Langridge:       So the first obvious question is what's Drupal?

Larry Garfield:           Drupal is an open source content management platform written in PHP. It's an enterprise-grade piece of software, and it's been used by large institutions from the White House to MTV to Amnesty International, the king of Belgium and so on, but it also scales down to small nonprofit, small company/corner store type sites and everything in between. It aims to be the CMS for the entire market spectrum with an emphasis on content strategy and content modeling by thinking of the web as more than just a bunch of pages but as content management that you can then expose on the web. That's really where Drupal's strength lies.

Stuart Langridge:       You've named a bunch of organizations that are using Drupal from the very large to the very small. Are you deliberately targeting everyone from the very large to the very small, or are there particular types of organizations that you think Drupal is best for?

Security fix for Drupal, new versions 7.35 and 6.35 released

The Drupal project has just released two new versions that fix multiple vulnerabilities, and one of them is considered moderately critical. You can find more info about these issues on the Drupal's blog post by their security team.

Some issues include: 

• Password reset URLs can be forged under certain circumstances, allowing an attacker to gain access to another user's account without knowing the account's password

• A malicious users can use the "destination" query string parameter to construct a URL that will trick users into being redirected to a 3rd party website

We have released Bitnami Drupal 6.35 and 7.35 installers, virtual machines and Amazon EC2, Google and Windows Azure cloud images that fix this issue. If you already have a running version of Bitnami Drupal, you can update it with the drush tool.

$ cd /opt/bitnami/apps/drupal/htdocs
$ drush up

We will continue to work on updating and releasing new versions of Drupal-based projects: CiviCRM and OpenAtrium.

Drupal security fix SA-CORE-2014-005

The Drupal project has just released a new version that fixes a highly critical issue: SA-CORE-2014-005. A vulnerability in the Drupal 7 API allows an attacker to send specially crafted requests resulting in arbitrary SQL execution.

We have released BitNami Drupal 7.32 installers, virtual machines and Amazon EC2 images that fix this issue. We are continuing to work on upgrading other Drupal-based applications like CiviCRM and OpenAtrium.

You should patch your Drupal version as soon as possible. You can follow the step by step instructions at this blog post. Basically you will need to ssh to your machine, ssh to the Drupal installation directory and execute drush.

$ cd /opt/bitnami/apps/drupal/htdocs
$ drush up

If everything goes well you should see something similar to the following:

Project drupal was updated successfully. Installed version is now 7.32.

Backups were saved into the directory /home/bitnami/drush-backups/bitnami_drupal7/20141017020023/drupal.       [ok]

No database updates required                    [success]

'all' cache was cleared.                        [success]

Finished performing updates.                         [ok]

In case you were not familiar with Bitnami Drupal, it is a self-contained and easy to use distribution that makes it simple to start developing and deploying Drupal applications.

Security fix for Drupal, new versions 7.29 and 6.32 released

The Drupal project has just released two new versions, v6.32 and v7.29, that fix several vulnerabilities: SA-CORE-2014-002 and SA-CORE-2014-003.

We have released BitNami Drupal 6.32 and 7.29 installers, virtual machines, Amazon EC2 and Microsoft Azure cloud images that fix this issue. We are continuing to work on upgrading other Drupal-based applications like CiviCRM and OpenAtrium.

In case you are not familiar with Bitnami Drupal, it is a self-contained and easy to use distribution that makes it simple to start developing and deploying Drupal applications.

Security fix for Drupal, new versions 7.26 and 6.30 released

The Drupal project has just released two new versions that fix a multiple vulnerabilities and one of them is considered highly critical. You can find more info about these issue at the Drupal blog post by the security team.

We have released BitNami Drupal 6.30 and 7.26 installers, virtual machines and Amazon EC2 and Windows Azure cloud images that fix this issue. It is also available BitNami Drupal 8.x version that allows you update Drupal files to the latest development version with Git. Check out our previous blog post to know how to start developing with Drupal 8.

We continue working on updating and releasing new versions of Drupal-based projects: CiviCRM and OpenAtrium.

Security fix for Drupal, new versions 6.29 and 7.24 released

The Drupal project has just released two new versions that fix multiple vulnerabilities. You can find more info about them at the Drupal blog post by the security team.

We have released BitNami Drupal 6.29 and 7.24 installers, virtual machines and Amazon EC2 and Windows Azure cloud images that fix this issue. You can also download BitNami Drupal 8.x version that allows you update Drupal files to the latest development version with Git.

We also released new versions of Drupal-based projects: CiviCRM 4.4.2 and OpenAtrium 2.09

Waiting for Drupal 8? Drupal 8 Dev already available in BitNami!

Drupal, one of the most famous open source content management platforms, is getting closer to their next major release: Drupal 8. Although Drupal 8 is not ready yet, we are happy to offer a ready-to-run package with 8.x-dev and drush 7.0-dev (compatible with Drupal 8) so you can get an early look at this much-anticipated release. It can be deployed using all-in-one free native installers (for Windows, Linux and Mac OS X), virtual machines and Cloud Images.

The development of Drupal 8 is being focused in 7 major "core initiatives":

• + Configuration management: In Drupal 8 configuration lives in files and the database is used only for caching. This allows developers to track changes, put configuration under version control amd update a production site cleanly.
• + HTML5: This is one of the top 5 initiatives for Drupal 8; switch Drupal's default doctype from XHTML to HTML5 adding support for the new form elements to Drupal’s Form API and other features.
• + Blocks & Layouts: Drupal 8 provides a standardized mechanism of output components (blocks, page callbacks, menus, theme settings, and more) and new tools for placing content on a page.
• + Mobile-friendly features: enablement of administrative task management from a mobile device, a mobile responsive design, and an improved front-end performance.
• + Multilingual: New functionality and tools in Drupal 8 core will make building a site with multiple languages in mind a much easier experience
• + Views in core: The Views module which is installed on 70% of all Drupal sites, will be part of the Drupal 8 core.
• + Web Services: With Drupal 8, Drupal evolves from a web CMS into a REST server that includes a web CMS. Drupal doesn't just support web services: Drupal is a web service.

The development phase for Drupal 8 started two years ago and after the feature completion phase, Alpha releases are already available. API changes may still be accepted, and it is time to provide early API feedback before starting updgrading contributed modules and themes once the API is stable. More details about the Drupal release cycle can be found on the Drupal official site.

At BitNami one of our goals is to simplify the testing of the latest versions of open source web applications. BitNami Drupal is completly self-contained and it will not conflict with your current development environment. You can download it, give a try and safely remove it when you are done.

Drupal thrives on developer contributions, and you are encouraged to get involved by testing and provide feedback.

CiviCRM now part of the BitNami Library

We are happy to announce the latest addition to the BitNami Library, CiviCRM, winner of the BitNami contest. CiviCRM is a web-based, open source, Constituent Relationship Management (CRM) software geared toward meeting the needs of non-profit and other civic-sector organizations.

CiviCRM can be integrated with Drupal, Joomla! and WordPress content management systems giving you the tools to connect, communicate and activate your supporters and constituents. Now, in the BitNami Library, you can find BitNami CiviCRM, an easy to deploy package of CiviCRM integrated with Drupal. We will add support for WordPress and Joomla! integrations if there is demand. You can download free, ready to run native installers for Windows, OS X and Linux, virtual machines and Azure and Amazon EC2 cloud images

As we usually do for our contest winners, we contacted the CiviCRM team to learn more about their project. Dave Greenberg, one of the CiviCRM core team members, was kind enough to answer our questions and tell us more about the project.

What is the goal of the CiviCRM application?

CiviCRM is a web-based, open source, Constituent Relationship Management (CRM) software geared toward meeting the needs of non-profit and other civic-sector organizations. Using CiviCRM's robust feature set, organizations can further their mission through contact management, fundraising, event management, member management, mass e-mail marketing, peer-to-peer campaigns, case management, and much more. CiviCRM is localized in over 20 languages including: Chinese (Taiwan, China), Dutch, English (Australia, Canada, U.S., UK), French (France, Canada), German, Italian, Japanese, Russian, and Swedish.

What are some of the features of CiviCRM?

CiviCRM's fundraising features make it easy for organizations to create contribution forms for multiple fundraising appeals - recording pledges, one-time donations, recurring donations, tribute donations and more.
 
CiviCRM offers a complete suite of communications tools allowing you to build subscriber lists and create effective mass mailings.
CiviCRM integrates seamlessly with public websites built using Drupal, Joomla! or WordPress.
 
CiviCRM helps you create and manage event registration - recording constituent attendance directly in their activity record.
 
CiviCRM provides flexible membership management for organizations including convenient online sign-up and renewal. 

Which projects or organizations are using CiviCRM currently? What kind of projects do they use it for?

CiviCRM is used by thousands of organizations globally - ranging from large charities (Leaukaemia & Lymphoma Research) and global advocacy organizations (Amnesty International) to foundations (Wikimedia Foundation, Electronic Frontier Foundation, Free Software Foundation ... ) to local community, faith-based and grassroots organizations (Education Outside, Bay Area Children's Theater, Brooklyn Symphony Orchestra), and government entities (New York State Senate). 

Uses range from constituent case management to fundraising and event management to issues advocacy.
 

What do you expect will be the main benefits of having BitNami packages available for CiviCRM?

Bitnami cloud-based 1 click installations will provide an easy on-ramp for more organizations to implement CiviCRM in a cost-effective and secure environment.  

If you would like to see CiviCRM in action, launch a free cloud demo server with the BitNami Cloud Launchpad for Azure by clicking the launch button below.