UT Drupal Kit 2.13.3 Security Release – Media Module

ITS has posted a second patch-level release of the UT Drupal Kit today in order to address a critical security vulnerability in the Media module announced on April 25, 2018 (View the complete security advisory on Drupal.org).

It is recommended that all users of the UT Drupal Kit update their sites with this latest version as soon as possible.

We apologize for putting site owners in the position of having to upgrade sites twice in rapid succession, but the security advisory for the Media module was not released until almost two hours after the Drupal core update, and we had already completed the packaging and release process for the Kit by that time.

The Drupal security team is advising that all sites upgrade to this latest version of the Media module as soon as possible, so we have prepared this second release out of an abundance of caution.

How to Update the UT Drupal Kit

Complete instructions for updating a UT Drupal Kit site are available on the documentation wiki.

Please review the release notes thoroughly, and always make backups of your code, files, and database before proceeding with an update!

UT Drupal Kit 2.13.1 Security Release

ITS has posted a patch-level release of the UT Drupal Kit in order to address the critical security vulnerability in Drupal core announced on April 25, 2018 (View the complete security advisory on Drupal.org).

It is recommended that all users of the UT Drupal Kit update their sites with this latest version as soon as possible.

How to Update the UT Drupal Kit

Complete instructions for updating a UT Drupal Kit site are available on the documentation wiki.

Please review the release notes thoroughly, and always make backups of your code, files, and database before proceeding with an update!

UT Drupal Kit 2.13 Release

ITS is happy to announce the immediate availability of UT Drupal Kit 2.13, the (lucky) thirteenth maintenance release for our University distribution since the inclusion of the Forty Acres theme and the Page Builder module.

The 2.13 release includes a fix to the appearance and behavior of menu items in the main navigation of the Forty Acres theme, as well as a new contrib module that improves accessibility for embedded iframe content. There are a number of contrib module updates, and this release also includes Drupal Core 7.58, which incorporates a critical security update previously released in version 2.12.3.

MENU BEHAVIOR FIX

The 2.13 version of the Forty Acres theme fixes a bug in the main menu display that occurs with second-level menu items that are long enough to break onto multiple lines. As a result of these changes, the width of the menu dropdowns now varies consistently based on the number of items in the menu, which determines how many columns will be used to display the items.

NEW CONTRIB MODULE – IFRAME TITLE FILTER

The 2.13 release includes a new module that was created by the ITS Drupal team but is maintained on Drupal.org — iFrame Title Filter. The objective of this module is to increase compliance with WCAG 2.0 AA accessibility guidelines by providing a title attribute for all iframe elements present on a page, even if the title was not provided by the provider of the iframe’s original source.

This module will be enabled by default as part of the “Filtered HTML” text format on all sites installed on version 2.13 or later. Sites installed prior to version 2.13 can add this functionality by enabling the iFrame Title Filter module and enabling it in the desired text format(s).

CONTRIB UPDATES

The 2.13 release includes updates to the following contrib modules:

HOW TO UPDATE THE UT DRUPAL KIT

Complete instructions and download links for updating a UT Drupal Kit site are available on the documentation wiki. Pantheon site dashboards that use the UT Drupal Kit distribution should see the upstream updates available now; see the Pantheon documentation for more information on applying upstream updates.

Please review the changelog and special release notes thoroughly, and always make backups of your code, files, and database before proceeding with an update!

NEXT RELEASES

The UT Drupal Kit is released on bi-monthly maintenance release schedule, with releases targeted for the second Tuesday of the month. The next planned release for this year is UT Drupal Kit 7.x-2.14, due on June 12, 2018.

If you have questions or concerns about the UT Drupal Kit, please feel free to email us at drupal-kit-support@utlists.utexas.edu.