EPrints 3.4.2 - Revision history

Drn@ecs.soton.ac.uk: Added publication version number

2021-07-18T21:50:36Z

Added publication version number

Drn@ecs.soton.ac.uk: Added release notes menu

2021-04-30T09:05:22Z

Added release notes menu

Drn@ecs.soton.ac.uk: Adds issue with BibTeX import from file.

2021-03-31T15:06:12Z

Adds issue with BibTeX import from file.

Drn@ecs.soton.ac.uk at 09:58, 26 February 2021

2021-02-26T09:58:20Z

Drn@ecs.soton.ac.uk: results.xml not search_results.xml

2021-02-26T09:56:12Z

results.xml not search_results.xml

Drn@ecs.soton.ac.uk: /* Known Issues */

2021-02-24T20:13:05Z

‎Known Issues

Drn@ecs.soton.ac.uk: /* Known Vulnerabilities */

2021-02-24T08:49:12Z

‎Known Vulnerabilities

Drn@ecs.soton.ac.uk: /* Known Vulnerabilities */

2021-02-23T23:34:23Z

‎Known Vulnerabilities

Drn@ecs.soton.ac.uk: /* Known Vulnerabilities */

2021-02-23T23:33:46Z

‎Known Vulnerabilities

Drn@ecs.soton.ac.uk: /* Known Vulnerabilities */

2021-02-23T23:30:44Z

‎Known Vulnerabilities

@@ Line 4: / Line 4: @@
 EPrints 3.4.2 is now available from [https://files.eprints.org/2500 files.eprints.org] and [https://github.com/eprints/eprints3.4/releases/tag/v3.4.2 GitHub].
 * '''Zero codename:''' ''Blueberry Muffin Derecho''
-* '''Publication flavour codename:''' ''Pecan Pie Huaico''
+* '''Publication flavour codename:''' ''Pecan Pie Huaico (1.2)''
 === New Dependencies ===

← Older revision		Revision as of 09:05, 30 April 2021
Line 1:		Line 1:
		+	{{releasenotes}}
		+
	== Release Notes ==		== Release Notes ==
	EPrints 3.4.2 is now available from [https://files.eprints.org/2500 files.eprints.org] and [https://github.com/eprints/eprints3.4/releases/tag/v3.4.2 GitHub].		EPrints 3.4.2 is now available from [https://files.eprints.org/2500 files.eprints.org] and [https://github.com/eprints/eprints3.4/releases/tag/v3.4.2 GitHub].

@@ Line 118: / Line 118: @@
 * As issues are not public-facing EPrint issue citation was not updated with the public-facing [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility] changes but issue results will render differently unless this is updated to use <code><nowiki><div></nowiki></code> tags rather than <code>&lt;tr&gt;</code> and <code>&lt;td&gt;</code> tags. [https://github.com/eprints/eprints3.4/commit/c53677f4f130e303a8cf8513b7c885d62386bec6 This patch] fixes the issue.
 * Trying to "Save and Return" on a non-multiple compound field causes an internal server error.  [https://github.com/eprints/eprints3.4/pull/84/commits/23cf710a96ac07a44702e4b181b47ec29302e336 This patch] fixes the issue.
 == Planned Development ==

@@ Line 115: / Line 115: @@
 == Known Issues ==
 * Search results from admin menu's "Search users" formatting is somewhat broken due to generic changes made to improve [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility]. [https://github.com/eprints/eprints3.4/commit/a0078fa00e1259f07327ebf2ddf1cafdfe4e3ea7 This patch] fixes this issue.
-* If your repository has a local version of <code>citations/eprint/results.xml</code> this will cause issues when rendering search results for admin's "Search items" and probably also "Advanced search".  Ensure <code><tr></code> and <code><td></code> tags are replaced with <code><nowiki><div></nowiki></code> tags. Style attributes can also be removed from these elements as they should now be part of the <code>lib/static/style/auto/search.css</code>.  If your archive has its own <code>search.css</code> you may need to copy some content from the <code>lib</code> version of <code>search.css</code> as it relates to ''ep_search_result''.
+* If your repository has a local version of <code>citations/eprint/result.xml</code> this will cause issues when rendering search results for admin's "Search items" and probably also "Advanced search".  Ensure <code><tr></code> and <code><td></code> tags are replaced with <code><nowiki><div></nowiki></code> tags. Style attributes can also be removed from these elements as they should now be part of the <code>lib/static/style/auto/search.css</code>.  If your archive has its own <code>search.css</code> you may need to copy some content from the <code>lib</code> version of <code>search.css</code> as it relates to ''ep_search_result''.
 * As issues are not public-facing EPrint issue citation was not updated with the public-facing [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility] changes but issue results will render differently unless this is updated to use <code><nowiki><div></nowiki></code> tags rather than <code>&lt;tr&gt;</code> and <code>&lt;td&gt;</code> tags. [https://github.com/eprints/eprints3.4/commit/c53677f4f130e303a8cf8513b7c885d62386bec6 This patch] fixes the issue.
 * Trying to "Save and Return" on a non-multiple compound field causes an internal server error.  [https://github.com/eprints/eprints3.4/pull/84/commits/23cf710a96ac07a44702e4b181b47ec29302e336 This patch] fixes the issue.

@@ Line 115: / Line 115: @@
 == Known Issues ==
 * Search results from admin menu's "Search users" formatting is somewhat broken due to generic changes made to improve [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility]. [https://github.com/eprints/eprints3.4/commit/a0078fa00e1259f07327ebf2ddf1cafdfe4e3ea7 This patch] fixes this issue.
-* If your repository has a local version of <code>citations/eprint/search_results.xml</code> this will cause issues when rendering search results for admin's "Search items" and probably also "Advanced search".  Ensure <code><tr></code> and <code><td></code> tags are replaced with <code><nowiki><div></nowiki></code> tags. Style attributes can also be removed from these elements as they should now be part of the <code>lib/static/style/auto/search.css</code>.  If your archive has its own <code>search.css</code> you may need to copy some content from the <code>lib</code> version of <code>search.css</code> as it relates to ''ep_search_result''.
+* If your repository has a local version of <code>citations/eprint/results.xml</code> this will cause issues when rendering search results for admin's "Search items" and probably also "Advanced search".  Ensure <code><tr></code> and <code><td></code> tags are replaced with <code><nowiki><div></nowiki></code> tags. Style attributes can also be removed from these elements as they should now be part of the <code>lib/static/style/auto/search.css</code>.  If your archive has its own <code>search.css</code> you may need to copy some content from the <code>lib</code> version of <code>search.css</code> as it relates to ''ep_search_result''.
 * As issues are not public-facing EPrint issue citation was not updated with the public-facing [http://accessibility.eprints-hosting.org/accessibility/roadmap.html accessibility] changes but issue results will render differently unless this is updated to use <code><nowiki><div></nowiki></code> tags rather than <code>&lt;tr&gt;</code> and <code>&lt;td&gt;</code> tags. [https://github.com/eprints/eprints3.4/commit/c53677f4f130e303a8cf8513b7c885d62386bec6 This patch] fixes the issue.
 * Trying to "Save and Return" on a non-multiple compound field causes an internal server error.  [https://github.com/eprints/eprints3.4/pull/84/commits/23cf710a96ac07a44702e4b181b47ec29302e336 This patch] fixes the issue.

@@ Line 105: / Line 105: @@
 == Known Vulnerabilities ==
-The following vulnerabilities are patched with the patch file available at https://files.eprints.org/2548:
+The following vulnerabilities are patched with the security patch available at https://files.eprints.org/2548:
 ; /cgi/ajax/phrase : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26703 CVE-2021-26703] (Remote Code Execution)
 ; /cgi/cal : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26475 CVE-2021-26475] (Cross-Site Scripting) and [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26476 CVE-2021-26476] (Remote Code Execution)
@@ Line 111: / Line 111: @@
 ; /cgi/latex2png : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3342 CVE-2021-3342] (Remote Code Execution)
 ; /cgi/toolbox/toolbox : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26704 CVE-2021-26704] (Remote Code Execution)
-This patch file also modifies <b>/cgi/history_search</b>, which looked potentially susceptible to MySQL Injection Cross-Site Scripting and but was found not to be vulnerable.
+This patch file also modifies <b>/cgi/history_search</b> to ensure it was not susceptible to MySQL Injection and Cross-Site Scripting.  However, no exploit for this potential vulnerability was found.
 == Known Issues ==

@@ Line 110: / Line 110: @@
 ; /cgi/dataset_dictionary : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26702 CVE-2021-26702]
 ; /cgi/latex2png : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3342 CVE-2021-3342]
-; /cgi/toolbox/toolbox : https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26704 CVE-2021-26704]
+; /cgi/toolbox/toolbox : [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-26704 CVE-2021-26704]
 This patch file also modifies <b>/cgi/history_search</b>, which looked potentially susceptible to MySQL injection but was found not to be vulnerable.