ITS has posted a second patch-level release of the UT Drupal Kit today in order to address a critical security vulnerability in the Media module announced on April 25, 2018 (View the complete security advisory on Drupal.org).
It is recommended that all users of the UT Drupal Kit update their sites with this latest version as soon as possible.
We apologize for putting site owners in the position of having to upgrade sites twice in rapid succession, but the security advisory for the Media module was not released until almost two hours after the Drupal core update, and we had already completed the packaging and release process for the Kit by that time.
The Drupal security team is advising that all sites upgrade to this latest version of the Media module as soon as possible, so we have prepared this second release out of an abundance of caution.
How to Update the UT Drupal Kit
Complete instructions for updating a UT Drupal Kit site are available on the documentation wiki.
Please review the release notes thoroughly, and always make backups of your code, files, and database before proceeding with an update!
