The uPortal project is pleased to announce that uPortal 2.5.3.1 is now available. 2.5.3.1 is a "security patch release", the most conservative type of release produced by the project under the project release strategy, and contains the minimum change to uPortal 2.5.3 required to block a critical security exploit that may affect some (but not all) uPortal deployments.
uPortal adopters are advised to immediately upgrade to this release or otherwise patch the critical security issue.
Public announcement of the issue and the availability of a general-audience uPortal release is the final step in a process orchestrated by JA-SIG's security contact group.
Special thanks are due to the University of Wisconsin-Madison, Eric Dalquist, Rutgers University, Bill Thompson, and Faizan Ahmed.
