EPrints 3.4.2 - Revision history

Drn@ecs.soton.ac.uk: Added publication version number

2021-07-18T21:50:36Z

Added publication version number

← Older revision		Revision as of 21:50, 18 July 2021
Line 4:		Line 4:
	EPrints 3.4.2 is now available from [https://files.eprints.org/2500 files.eprints.org] and [https://github.com/eprints/eprints3.4/releases/tag/v3.4.2 GitHub].		EPrints 3.4.2 is now available from [https://files.eprints.org/2500 files.eprints.org] and [https://github.com/eprints/eprints3.4/releases/tag/v3.4.2 GitHub].
	* '''Zero codename:''' ''Blueberry Muffin Derecho''		* '''Zero codename:''' ''Blueberry Muffin Derecho''
	* '''Publication flavour codename:''' ''Pecan Pie Huaico''		* '''Publication flavour codename:''' ''Pecan Pie Huaico (1.2)''

	=== New Dependencies ===		=== New Dependencies ===

Drn@ecs.soton.ac.uk: Added release notes menu

2021-04-30T09:05:22Z

Added release notes menu

← Older revision		Revision as of 09:05, 30 April 2021
Line 1:		Line 1:
			{{releasenotes}}

	== Release Notes ==		== Release Notes ==
	EPrints 3.4.2 is now available from [https://files.eprints.org/2500 files.eprints.org] and [https://github.com/eprints/eprints3.4/releases/tag/v3.4.2 GitHub].		EPrints 3.4.2 is now available from [https://files.eprints.org/2500 files.eprints.org] and [https://github.com/eprints/eprints3.4/releases/tag/v3.4.2 GitHub].

Drn@ecs.soton.ac.uk: Adds issue with BibTeX import from file.

2021-03-31T15:06:12Z

Adds issue with BibTeX import from file.

← Older revision		Revision as of 15:06, 31 March 2021
Line 118:		Line 118:
	* As issues are not public-facing EPrint issue citation was not updated with the public-facing [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility] changes but issue results will render differently unless this is updated to use <code><nowiki><div></nowiki></code> tags rather than <code><tr></code> and <code><td></code> tags. [https://github.com/eprints/eprints3.4/commit/c53677f4f130e303a8cf8513b7c885d62386bec6 This patch] fixes the issue.		* As issues are not public-facing EPrint issue citation was not updated with the public-facing [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility] changes but issue results will render differently unless this is updated to use <code><nowiki><div></nowiki></code> tags rather than <code><tr></code> and <code><td></code> tags. [https://github.com/eprints/eprints3.4/commit/c53677f4f130e303a8cf8513b7c885d62386bec6 This patch] fixes the issue.
	* Trying to "Save and Return" on a non-multiple compound field causes an internal server error. [https://github.com/eprints/eprints3.4/pull/84/commits/23cf710a96ac07a44702e4b181b47ec29302e336 This patch] fixes the issue.		* Trying to "Save and Return" on a non-multiple compound field causes an internal server error. [https://github.com/eprints/eprints3.4/pull/84/commits/23cf710a96ac07a44702e4b181b47ec29302e336 This patch] fixes the issue.
			* BibTeX import when uploading from a file (not pasted data) fails. [https://github.com/eprints/eprints3.4/commit/001079ce4fafc8d63af925efc639c7a62296c453 This patch] fixes the issue.

	== Planned Development ==		== Planned Development ==

Drn@ecs.soton.ac.uk at 09:58, 26 February 2021

2021-02-26T09:58:20Z

← Older revision		Revision as of 09:58, 26 February 2021
Line 115:		Line 115:
	== Known Issues ==		== Known Issues ==
	* Search results from admin menu's "Search users" formatting is somewhat broken due to generic changes made to improve [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility]. [https://github.com/eprints/eprints3.4/commit/a0078fa00e1259f07327ebf2ddf1cafdfe4e3ea7 This patch] fixes this issue.		* Search results from admin menu's "Search users" formatting is somewhat broken due to generic changes made to improve [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility]. [https://github.com/eprints/eprints3.4/commit/a0078fa00e1259f07327ebf2ddf1cafdfe4e3ea7 This patch] fixes this issue.
	* If your repository has a local version of <code>citations/eprint/~~results~~.xml</code> this will cause issues when rendering search results for admin's "Search items" and probably also "Advanced search". Ensure <code><tr></code> and <code><td></code> tags are replaced with <code><nowiki><div></nowiki></code> tags. Style attributes can also be removed from these elements as they should now be part of the <code>lib/static/style/auto/search.css</code>. If your archive has its own <code>search.css</code> you may need to copy some content from the <code>lib</code> version of <code>search.css</code> as it relates to ''ep_search_result''.		* If your repository has a local version of <code>citations/eprint/result.xml</code> this will cause issues when rendering search results for admin's "Search items" and probably also "Advanced search". Ensure <code><tr></code> and <code><td></code> tags are replaced with <code><nowiki><div></nowiki></code> tags. Style attributes can also be removed from these elements as they should now be part of the <code>lib/static/style/auto/search.css</code>. If your archive has its own <code>search.css</code> you may need to copy some content from the <code>lib</code> version of <code>search.css</code> as it relates to ''ep_search_result''.
	* As issues are not public-facing EPrint issue citation was not updated with the public-facing [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility] changes but issue results will render differently unless this is updated to use <code><nowiki><div></nowiki></code> tags rather than <code><tr></code> and <code><td></code> tags. [https://github.com/eprints/eprints3.4/commit/c53677f4f130e303a8cf8513b7c885d62386bec6 This patch] fixes the issue.		* As issues are not public-facing EPrint issue citation was not updated with the public-facing [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility] changes but issue results will render differently unless this is updated to use <code><nowiki><div></nowiki></code> tags rather than <code><tr></code> and <code><td></code> tags. [https://github.com/eprints/eprints3.4/commit/c53677f4f130e303a8cf8513b7c885d62386bec6 This patch] fixes the issue.
	* Trying to "Save and Return" on a non-multiple compound field causes an internal server error. [https://github.com/eprints/eprints3.4/pull/84/commits/23cf710a96ac07a44702e4b181b47ec29302e336 This patch] fixes the issue.		* Trying to "Save and Return" on a non-multiple compound field causes an internal server error. [https://github.com/eprints/eprints3.4/pull/84/commits/23cf710a96ac07a44702e4b181b47ec29302e336 This patch] fixes the issue.

Drn@ecs.soton.ac.uk: results.xml not search_results.xml

2021-02-26T09:56:12Z

results.xml not search_results.xml

← Older revision		Revision as of 09:56, 26 February 2021
Line 115:		Line 115:
	== Known Issues ==		== Known Issues ==
	* Search results from admin menu's "Search users" formatting is somewhat broken due to generic changes made to improve [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility]. [https://github.com/eprints/eprints3.4/commit/a0078fa00e1259f07327ebf2ddf1cafdfe4e3ea7 This patch] fixes this issue.		* Search results from admin menu's "Search users" formatting is somewhat broken due to generic changes made to improve [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility]. [https://github.com/eprints/eprints3.4/commit/a0078fa00e1259f07327ebf2ddf1cafdfe4e3ea7 This patch] fixes this issue.
	* If your repository has a local version of <code>citations/eprint/~~search_results~~.xml</code> this will cause issues when rendering search results for admin's "Search items" and probably also "Advanced search". Ensure <code><tr></code> and <code><td></code> tags are replaced with <code><nowiki><div></nowiki></code> tags. Style attributes can also be removed from these elements as they should now be part of the <code>lib/static/style/auto/search.css</code>. If your archive has its own <code>search.css</code> you may need to copy some content from the <code>lib</code> version of <code>search.css</code> as it relates to ''ep_search_result''.		* If your repository has a local version of <code>citations/eprint/results.xml</code> this will cause issues when rendering search results for admin's "Search items" and probably also "Advanced search". Ensure <code><tr></code> and <code><td></code> tags are replaced with <code><nowiki><div></nowiki></code> tags. Style attributes can also be removed from these elements as they should now be part of the <code>lib/static/style/auto/search.css</code>. If your archive has its own <code>search.css</code> you may need to copy some content from the <code>lib</code> version of <code>search.css</code> as it relates to ''ep_search_result''.
	* As issues are not public-facing EPrint issue citation was not updated with the public-facing [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility] changes but issue results will render differently unless this is updated to use <code><nowiki><div></nowiki></code> tags rather than <code><tr></code> and <code><td></code> tags. [https://github.com/eprints/eprints3.4/commit/c53677f4f130e303a8cf8513b7c885d62386bec6 This patch] fixes the issue.		* As issues are not public-facing EPrint issue citation was not updated with the public-facing [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility] changes but issue results will render differently unless this is updated to use <code><nowiki><div></nowiki></code> tags rather than <code><tr></code> and <code><td></code> tags. [https://github.com/eprints/eprints3.4/commit/c53677f4f130e303a8cf8513b7c885d62386bec6 This patch] fixes the issue.
	* Trying to "Save and Return" on a non-multiple compound field causes an internal server error. [https://github.com/eprints/eprints3.4/pull/84/commits/23cf710a96ac07a44702e4b181b47ec29302e336 This patch] fixes the issue.		* Trying to "Save and Return" on a non-multiple compound field causes an internal server error. [https://github.com/eprints/eprints3.4/pull/84/commits/23cf710a96ac07a44702e4b181b47ec29302e336 This patch] fixes the issue.

Drn@ecs.soton.ac.uk: /* Known Issues */

2021-02-24T20:13:05Z

Known Issues

← Older revision		Revision as of 20:13, 24 February 2021
Line 115:		Line 115:
	== Known Issues ==		== Known Issues ==
	* Search results from admin menu's "Search users" formatting is somewhat broken due to generic changes made to improve [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility]. [https://github.com/eprints/eprints3.4/commit/a0078fa00e1259f07327ebf2ddf1cafdfe4e3ea7 This patch] fixes this issue.		* Search results from admin menu's "Search users" formatting is somewhat broken due to generic changes made to improve [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility]. [https://github.com/eprints/eprints3.4/commit/a0078fa00e1259f07327ebf2ddf1cafdfe4e3ea7 This patch] fixes this issue.
	* If your repository has a local version of <code>citations/eprint/search_results.xml</code> this will cause issues when rendering search results for admin's "Search items" and probably also "Advanced search". Ensure <code><tr></code> and <code><td></code> tags are replaced with <code><nowiki><div></nowiki></code> tags. Style attributes can also be removed from these elements as they should now be part of the <code>lib/static/style/auto/search.css</code>. If your archive has its own <code>search.css</~~c ode~~> you may need to copy some content from the <code>lib</code> version of <code>search.css</code> as it relates to ''ep_search_result''.		* If your repository has a local version of <code>citations/eprint/search_results.xml</code> this will cause issues when rendering search results for admin's "Search items" and probably also "Advanced search". Ensure <code><tr></code> and <code><td></code> tags are replaced with <code><nowiki><div></nowiki></code> tags. Style attributes can also be removed from these elements as they should now be part of the <code>lib/static/style/auto/search.css</code>. If your archive has its own <code>search.css</code> you may need to copy some content from the <code>lib</code> version of <code>search.css</code> as it relates to ''ep_search_result''.
	* As issues are not public-facing EPrint issue citation was not updated with the public-facing [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility] changes but issue results will render differently unless this is updated to use <code><nowiki><div></nowiki></code> tags rather than <code><tr></code> and <code><td></code> tags. [https://github.com/eprints/eprints3.4/commit/c53677f4f130e303a8cf8513b7c885d62386bec6 This patch] fixes the issue.		* As issues are not public-facing EPrint issue citation was not updated with the public-facing [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility] changes but issue results will render differently unless this is updated to use <code><nowiki><div></nowiki></code> tags rather than <code><tr></code> and <code><td></code> tags. [https://github.com/eprints/eprints3.4/commit/c53677f4f130e303a8cf8513b7c885d62386bec6 This patch] fixes the issue.
	* Trying to "Save and Return" on a non-multiple compound field causes an internal server error. [https://github.com/eprints/eprints3.4/pull/84/commits/23cf710a96ac07a44702e4b181b47ec29302e336 This patch] fixes the issue.		* Trying to "Save and Return" on a non-multiple compound field causes an internal server error. [https://github.com/eprints/eprints3.4/pull/84/commits/23cf710a96ac07a44702e4b181b47ec29302e336 This patch] fixes the issue.

Drn@ecs.soton.ac.uk: /* Known Vulnerabilities */

2021-02-24T08:49:12Z

Known Vulnerabilities

← Older revision		Revision as of 08:49, 24 February 2021
Line 105:		Line 105:

	== Known Vulnerabilities ==		== Known Vulnerabilities ==
	The following vulnerabilities are patched with the patch ~~file~~ available at https://files.eprints.org/2548:		The following vulnerabilities are patched with the security patch available at https://files.eprints.org/2548:
	; /cgi/ajax/phrase : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26703 CVE-2021-26703] (Remote Code Execution)		; /cgi/ajax/phrase : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26703 CVE-2021-26703] (Remote Code Execution)
	; /cgi/cal : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26475 CVE-2021-26475] (Cross-Site Scripting) and [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26476 CVE-2021-26476] (Remote Code Execution)		; /cgi/cal : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26475 CVE-2021-26475] (Cross-Site Scripting) and [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26476 CVE-2021-26476] (Remote Code Execution)
Line 111:		Line 111:
	; /cgi/latex2png : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3342 CVE-2021-3342] (Remote Code Execution)		; /cgi/latex2png : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3342 CVE-2021-3342] (Remote Code Execution)
	; /cgi/toolbox/toolbox : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26704 CVE-2021-26704] (Remote Code Execution)		; /cgi/toolbox/toolbox : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26704 CVE-2021-26704] (Remote Code Execution)
	This patch file also modifies <b>/cgi/history_search</b>~~, which looked potentially~~ susceptible to MySQL Injection Cross-Site Scripting ~~and but~~ was found ~~not to be vulnerable~~.		This patch file also modifies <b>/cgi/history_search</b> to ensure it was not susceptible to MySQL Injection and Cross-Site Scripting. However, no exploit for this potential vulnerability was found.

	== Known Issues ==		== Known Issues ==

Drn@ecs.soton.ac.uk: /* Known Vulnerabilities */

2021-02-23T23:34:23Z

Known Vulnerabilities

← Older revision		Revision as of 23:34, 23 February 2021
Line 111:		Line 111:
	; /cgi/latex2png : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3342 CVE-2021-3342] (Remote Code Execution)		; /cgi/latex2png : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3342 CVE-2021-3342] (Remote Code Execution)
	; /cgi/toolbox/toolbox : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26704 CVE-2021-26704] (Remote Code Execution)		; /cgi/toolbox/toolbox : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26704 CVE-2021-26704] (Remote Code Execution)
	This patch file also modifies <b>/cgi/history_search</b>, which looked potentially susceptible to MySQL ~~injection~~ but was found not to be vulnerable.		This patch file also modifies <b>/cgi/history_search</b>, which looked potentially susceptible to MySQL Injection Cross-Site Scripting and but was found not to be vulnerable.

	== Known Issues ==		== Known Issues ==

Drn@ecs.soton.ac.uk: /* Known Vulnerabilities */

2021-02-23T23:33:46Z

Known Vulnerabilities

← Older revision		Revision as of 23:33, 23 February 2021
Line 106:		Line 106:
	== Known Vulnerabilities ==		== Known Vulnerabilities ==
	The following vulnerabilities are patched with the patch file available at https://files.eprints.org/2548:		The following vulnerabilities are patched with the patch file available at https://files.eprints.org/2548:
	; /cgi/ajax/phrase : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26703 CVE-2021-26703]		; /cgi/ajax/phrase : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26703 CVE-2021-26703] (Remote Code Execution)
	; /cgi/cal : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26475 CVE-2021-26475] and [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26476 CVE-2021-26476]		; /cgi/cal : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26475 CVE-2021-26475] (Cross-Site Scripting) and [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26476 CVE-2021-26476] (Remote Code Execution)
	; /cgi/dataset_dictionary : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26702 CVE-2021-26702]		; /cgi/dataset_dictionary : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26702 CVE-2021-26702] (Cross-Site Scripting)
	; /cgi/latex2png : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3342 CVE-2021-3342]		; /cgi/latex2png : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3342 CVE-2021-3342] (Remote Code Execution)
	; /cgi/toolbox/toolbox : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26704 CVE-2021-26704]		; /cgi/toolbox/toolbox : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26704 CVE-2021-26704] (Remote Code Execution)
	This patch file also modifies <b>/cgi/history_search</b>, which looked potentially susceptible to MySQL injection but was found not to be vulnerable.		This patch file also modifies <b>/cgi/history_search</b>, which looked potentially susceptible to MySQL injection but was found not to be vulnerable.

Drn@ecs.soton.ac.uk: /* Known Vulnerabilities */

2021-02-23T23:30:44Z

Known Vulnerabilities

← Older revision		Revision as of 23:30, 23 February 2021
Line 110:		Line 110:
	; /cgi/dataset_dictionary : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26702 CVE-2021-26702]		; /cgi/dataset_dictionary : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26702 CVE-2021-26702]
	; /cgi/latex2png : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3342 CVE-2021-3342]		; /cgi/latex2png : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3342 CVE-2021-3342]
	; /cgi/toolbox/toolbox : https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26704 CVE-2021-26704]		; /cgi/toolbox/toolbox : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26704 CVE-2021-26704]
	This patch file also modifies <b>/cgi/history_search</b>, which looked potentially susceptible to MySQL injection but was found not to be vulnerable.		This patch file also modifies <b>/cgi/history_search</b>, which looked potentially susceptible to MySQL injection but was found not to be vulnerable.