Drupal Security Update – Wednesday, March 28

UPDATE, Monday, March 26: We do not anticipate any downtime during this change. We will apply a separate, non-security, maintenance update to the Middlebury Institute website Thursday morning at 9am EDT, 6am PDT, which will make the site unavailable for editors for a few minutes.

Next Wednesday, March 28, we will apply a security update to all Drupal sites shortly after it is released. This will occur between 18:00 and 19:30 UTC, which is 2:00-3:30pm EDT or 11:00am-12:30pm PDT. The Drupal project has posted a pre-release announcement of this update.

We do not anticipate any service interruption for people who are not logged in to our sites. It is unlikely that there will be an interruption for people logged in to our Drupal 7 sites, but more likely there will be a short interruption for people logged in to the Middlebury Institute’s Drupal 8 site. We advise you to have saved work in the sites prior to the scheduled update. We will post an announcement here when the update has been successfully applied, which will contain more information about the issue.

These are the sites affected:

  • http://www.middlebury.edu
  • https://www.middlebury.edu/institute (Drupal 8)
  • http://courses.middlebury.edu
  • http://courses.miis.edu
  • https://forms.middlebury.edu
  • https://forms.miis.edu
  • http://menus.middlebury.edu
  • http://museum.middlebury.edu
  • http://nchousing.middlebury.edu
  • http://25threunion.middlebury.edu
  • http://newlibstuff.middlebury.edu
  • http://drupaltraining.middlebury.edu
  • http://www.davisprojectsforpeace.org
  • http://www.davisfellowsforpeace.org
  • http://www.davisuwcscholars.org