Page History

...

This release addresses the following security issues discovered in DSpace 4.x and below:

DSpace API security fixes:

• [HIGH SEVERITY]  BasicWorkflow system is vulnerable to unauthorized manipulations (DS-3647 - requires a JIRA account to access)
  • Reported by Pascal-Nicolas Becker
• [LOW SEVERITY]  Apache Commons Collections vulnerability (COLLECTIONS-580) (DS-3520 - requires a JIRA account to access)
  • Reported by Alan Orth

In addition, this release fixes a few minor bugs in the 4.x releases. For more information, see the Changes section below.

...

Release Timeline:

• Release Date: TBAJuly 12, 2017