Author Archives: Ian McBride

Drupal Security Update – Wednesday, April 25

This Wednesday, April 25, we will apply a security update to all Drupal sites shortly after it is released. This will occur between 16:00 and 18:00 UTC, which is 12:00-2:00pm EDT or 9:00-11:00am PDT. The Drupal project has posted a pre-release announcement of this update.

We do not anticipate any service interruption while the update is applied. Still, we advise you to have saved work in the sites prior to the scheduled update. We will post an announcement here when the update has been successfully applied, which will contain more information about the issue.

These are the sites affected:

  • http://www.middlebury.edu
  • https://www.middlebury.edu/institute (Drupal 8)
  • http://courses.middlebury.edu
  • http://courses.miis.edu
  • https://forms.middlebury.edu
  • https://forms.miis.edu
  • http://menus.middlebury.edu
  • http://museum.middlebury.edu
  • http://nchousing.middlebury.edu
  • http://25threunion.middlebury.edu
  • http://newlibstuff.middlebury.edu
  • http://drupaltraining.middlebury.edu
  • http://www.davisprojectsforpeace.org
  • http://www.davisfellowsforpeace.org
  • http://www.davisuwcscholars.org

Drupal Security Update – Wednesday, March 28 Finished

Thank you for your patience as we applied this critical security update. Technical details are available on the Drupal project website. All sites now have this update applied and should be considered stable.

Update 3:54pm: There’s a missing dependency on the new Middlebury Institute website that we’re working to resolve, so the site may not be available, but should be secure.

Update 4:22pm: The Institute site should be available again.

Drupal Security Update – Wednesday, March 28

Next Wednesday, March 28, we will apply a security update to all Drupal sites shortly after it is released. This will occur between 18:00 and 19:30 UTC, which is 2:00-3:30pm EDT or 11:00am-12:30pm PDT. The Drupal project has posted a pre-release announcement of this update.

We do not anticipate any service interruption for people who are not logged in to our sites. It is unlikely that there will be an interruption for people logged in to our Drupal 7 sites, but more likely there will be a short interruption for people logged in to the Middlebury Institute’s Drupal 8 site. We advise you to have saved work in the sites prior to the scheduled update. We will post an announcement here when the update has been successfully applied, which will contain more information about the issue.

These are the sites affected:

  • http://www.middlebury.edu
  • https://www.middlebury.edu/institute (Drupal 8)
  • http://courses.middlebury.edu
  • http://courses.miis.edu
  • https://forms.middlebury.edu
  • https://forms.miis.edu
  • http://menus.middlebury.edu
  • http://museum.middlebury.edu
  • http://nchousing.middlebury.edu
  • http://25threunion.middlebury.edu
  • http://newlibstuff.middlebury.edu
  • http://drupaltraining.middlebury.edu
  • http://www.davisprojectsforpeace.org
  • http://www.davisfellowsforpeace.org
  • http://www.davisuwcscholars.org

Weekly Web Updates – December 19, 2016

Updates

Fixes and Tweaks

  • Improved the video shortcode processing in Drupal to handle additional forms of Vimeo URLs.
  • We’ve added Varnish caching in front of the New Library Items site, which should cause it to load much faster if it’s been visited recently.
  • There is a new “trainee” role in the Drupal Training website, which includes everyone with an account to better ensure that permission to use the site is limited to people signed in through CAS.
  • We have limited the allowed file types for uploaded files in Drupal to include common image and document formats.
  • Older versions of the Middlebury Student Life site should no longer get indexed by search engines. We are working on removing old copies of their content in a way that does not impact the live site.

Ongoing Work

  • Creating a new website for the Middlebury Institute of International Studies.
  • A small redesign of the Middlebury News Room to bring it more inline with the newsletter.
  • Building out the configuration of our Omeka, CAS and Course Catalog servers in Chef, which is a configuration management system. We have already completed this work for our Drupal, WordPress, MediaWiki, and GO services.
  • Upgrading the Drupal sites for the Davis programs, Dining Menus, and Museum of Art to Drupal 8.
  • Providing Course Hub access for Schools Abroad courses.

Weekly Web Updates – December 12, 2016

Updates

Fixes and Tweaks

  • CAS now requires TLS 1.2 when connecting to its service in order to provide additional session security. The Online Directory was upgraded to .NET 4.5 to accomodate this change.
  • We’ve added a Google Tag Manager plugin for Omeka and one for MediaWiki. Custom support for this was also added to MiddMedia.
  • Scholarships are now included in the post types shown on the MiddSTART homepage and several coding errors were resolved that were preventing comments from working as intended.
  • Fixed a login issue with MediaWiki that prevented some users from being able to edit.
  • Panopto is now included in the video provider options for the Davis Projects for Peace site.

Ongoing Work

  • Creating a new website for the Middlebury Institute of International Studies.
  • A small redesign of the Middlebury News Room to bring it more inline with the newsletter.
  • Building out the configuration of our CAS and Course Catalog servers in Chef, which is a configuration management system. We have already completed this work for our Drupal, WordPress, MediaWiki, and GO services.
  • Upgrading the Drupal sites for the Davis programs, Dining Menus, and Museum of Art to Drupal 8.
  • Providing Course Hub access for Schools Abroad courses.

Weekly Web Updates – December 5, 2016

We upgraded the servers that run go.middlebury.edu, go.miis.edu, and mediawiki.middlebury.edu. These are now using the Chef server configuration tool to manage settings so that we can ensure proper change management over their setup. The GO service now supports the “https” protocol. Additionally, MediaWiki was upgraded from version 1.26.4 to version 1.28.0 as part of this change.

Updates

Fixes and Tweaks

  • When editing a GO shortcut, the “Apply These Changes” button is now on its own line, making it less likely that you will accidentally click the “Delete” button that used to be next to it.
  • Department image banners on the Middlebury Drupal site should now properly link to the department homepage rather than the image file if you have JavaScript enabled.
  • Course Hub term builders can now reorder subpage items in the hub.
  • The iCal feeds for the Dining Menus site now include the start and end time of each meal.
  • The L&ITS wiki now includes icons when linking to an external site. Also, the toclimit classes are in the stylesheet now so that feature will work.
  • Resolved an issue with images not loading in the Moodle Adaptive Quiz module.
  • The WordPress bbPress plugin went missing and was replaced.
  • The Course Catalog  now supports a JSON API to provide course data to the Kurogo mobile application.

Ongoing Work

  • A small redesign of the Middlebury News Room to bring it more inline with the newsletter.
  • Building out the configuration of our CAS and Course Catalog servers in Chef, which is a configuration management system. We have already completed this work for our Drupal, WordPress, MediaWiki, and GO services.
  • Upgrading the Drupal sites for the Davis programs, Dining Menus, and Museum of Art to Drupal 8.
  • Providing Course Hub access for Schools Abroad courses.