Tag: Security

UT Drupal Kit 3.11.3 Hotfix Release

Post author By Paul Grotevant
Post date May 2, 2023

NOTE: The previous official release of the UT Drupal Kit was numbered 3.11.1. During the packaging process of this hotfix release, a version 3.11.2 was briefly available but immediately revoked due to an error in the packaging process. Please ensure that all sites are updated to 3.11.3 as the most recent version.

UT Drupal Kit 3.11.3 is an interim release outside of the normal bi-monthly maintenance release cycle. This release contains a Drupal core update and a patch to fix a fatal error in the XML Sitemap module (xmlsitemap). This release also corrects metatag data that was incorrectly formatted during site migrations from Drupal 7.

There are no additional manual update steps required for this update.

For full details of all issues included in this release, please refer to the changelog on the release notes, which links to the corresponding GitHub issues.

Tags Drupal 9, Hotfix, Release Announcements, Security, UT Drupal Kit, UTDK 3

UT Drupal Kit

UT Drupal Kit Security Releases – All Versions

Post author By Paul Grotevant
Post date April 22, 2021

On April 21, 2021, a critical security advisory was released for Drupal core to disclose a cross-site scripting vulnerability, affecting all currently-supported versions of Drupal (7, 8, and 9).

Drupal core – Critical – Cross-site scripting – SA-CORE-2021-002

New versions of the UT Drupal Kit for both Drupal 7 and Drupal 9 incorporate the updated versions of Drupal core which address this vulnerability. There are no other changes in these releases.

It is recommended that all users of the UT Drupal Kit update their sites with this latest version as soon as practicable.

Tags Release Announcements, Security, UT Drupal Kit

UT Drupal Kit

UT Drupal Kit 3 – Beta 7.1 Release

Post author By Paul Grotevant
Post date September 16, 2020

ITS has posted a hotfix for the most recent beta release of UT Drupal Kit 3.0 (UTDK 3).

The 3.0.0-beta.7.1 release incorporates version 8.9.6 of Drupal core, which is a security release that addresses multiple advisories, including one critical:

Before updating, please review the release notes for Drupal 8.9.6.

Tags Drupal 8, Release Announcements, Security, UT Drupal Kit, UTDK 3

UT Drupal Kit

UT Drupal Kit 2.19.4 Security Release

Post author By Paul Grotevant
Post date November 7, 2019

ITS has posted a patch-level release of the UT Drupal Kit in order to address a critical security vulnerability in the SimpleSAMLphp library.

This release is only available via Pantheon upstream repository, as SimpleSAMLphp is not bundled with the standalone download version of the UT Drupal Kit.

It is recommended that all users of the UT Drupal Kit on Pantheon update their sites with this latest version as soon as practicable.

How to Update the UT Drupal Kit

Complete instructions for updating a UT Drupal Kit site are available on the documentation wiki.

Please review the release notes thoroughly, and always make backups of your code, files, and database before proceeding with an update!

Tags Pantheon, Release Announcements, Security, UT Drupal Kit

UT Drupal Kit

UT Drupal Kit 2.13.3 Security Release – Media Module

Post author By Paul Grotevant
Post date April 25, 2018

ITS has posted a second patch-level release of the UT Drupal Kit today in order to address a critical security vulnerability in the Media module announced on April 25, 2018 (View the complete security advisory on Drupal.org).

It is recommended that all users of the UT Drupal Kit update their sites with this latest version as soon as possible.

We apologize for putting site owners in the position of having to upgrade sites twice in rapid succession, but the security advisory for the Media module was not released until almost two hours after the Drupal core update, and we had already completed the packaging and release process for the Kit by that time.

The Drupal security team is advising that all sites upgrade to this latest version of the Media module as soon as possible, so we have prepared this second release out of an abundance of caution.

How to Update the UT Drupal Kit

Complete instructions for updating a UT Drupal Kit site are available on the documentation wiki.

Please review the release notes thoroughly, and always make backups of your code, files, and database before proceeding with an update!

Tags Release Announcements, Security

UT Drupal Kit

UT Drupal Kit 2.13.1 Security Release

Post author By Paul Grotevant
Post date April 25, 2018

ITS has posted a patch-level release of the UT Drupal Kit in order to address the critical security vulnerability in Drupal core announced on April 25, 2018 (View the complete security advisory on Drupal.org).

It is recommended that all users of the UT Drupal Kit update their sites with this latest version as soon as possible.

How to Update the UT Drupal Kit

Complete instructions for updating a UT Drupal Kit site are available on the documentation wiki.

Please review the release notes thoroughly, and always make backups of your code, files, and database before proceeding with an update!

Tags Release Announcements, Security

UT Drupal Kit

UT Drupal Kit 2.12.3 Security Release

Post author By Paul Grotevant
Post date March 28, 2018

ITS has posted a patch-level release of the UT Drupal Kit in order to address the highly critical security vulnerability in Drupal core announced on March 28, 2018 (View the complete security advisory on Drupal.org).

It is recommended that all users of the UT Drupal Kit update their sites with this latest version as soon as possible.

How to Update the UT Drupal Kit

Complete instructions for updating a UT Drupal Kit site are available on the documentation wiki.

Please review the release notes thoroughly, and always make backups of your code, files, and database before proceeding with an update!

Tags Release Announcements, Security

UT Drupal Kit

UT Drupal Kit 2.12.2 Security Release

Post author By Paul Grotevant
Post date March 5, 2018

ITS has posted a patch-level release of the UT Drupal Kit in order to address multiple critical security vulnerabilities in the SimpleSAMLphp library.

This release is only available via Pantheon upstream repository, as SimpleSAMLphp is not bundled with the standalone download version of the UT Drupal Kit.

It is recommended that all users of the UT Drupal Kit on Pantheon update their sites with this latest version as soon as practicable.

How to Update the UT Drupal Kit

Complete instructions for updating a UT Drupal Kit site are available on the documentation wiki.

Please review the release notes thoroughly, and always make backups of your code, files, and database before proceeding with an update!

Tags Pantheon, Security

UT Drupal Kit

UT Drupal Kit 2.12.1 Security Release

Post author By Paul Grotevant
Post date February 28, 2018

ITS has posted a patch-level release of the UT Drupal Kit in order to address the critical security vulnerability in Drupal core announced on February 21, 2018 (View the complete security advisory on Drupal.org).

It is recommended that all users of the UT Drupal Kit update their sites with this latest version as soon as practicable.

How to Update the UT Drupal Kit

Complete instructions for updating a UT Drupal Kit site are available on the documentation wiki.

Please review the release notes thoroughly, and always make backups of your code, files, and database before proceeding with an update!

Tags Security