From c6f2e16138bc2bc93880999e4a586ef5218594cc Mon Sep 17 00:00:00 2001 From: Alan Orth Date: Sat, 1 Oct 2016 08:47:26 +0300 Subject: [PATCH] Add notes for 2016-09-30 --- content/post/2016-09.md | 6 ++++++ public/2016-09/index.html | 8 ++++++++ public/index.xml | 8 ++++++++ public/post/index.xml | 8 ++++++++ public/tags/notes/index.xml | 8 ++++++++ 5 files changed, 38 insertions(+) diff --git a/content/post/2016-09.md b/content/post/2016-09.md index e0e345a06..f271d5023 100644 --- a/content/post/2016-09.md +++ b/content/post/2016-09.md @@ -539,3 +539,9 @@ $ ./delete-metadata-values.py -i ilrisubjects-delete-13.csv -f cg.subject.ilri - - Add `cg.identifier.ciatproject` to metadata registry in preparation for CIAT project tag - Merge changes for CIAT project tag ([#282](https://github.com/ilri/DSpace/pull/282)) +- DSpace Test (linode02) became unresponsive for some reason, I had to hard reboot it from the Linode console + +## 2016-09-30 + +- Deny access to REST API's `find-by-metadata-field` endpoint to protect against an upstream security issue (DS-3250) +- There is a patch but it is only for 5.5 and doesn't apply cleanly to 5.1 diff --git a/public/2016-09/index.html b/public/2016-09/index.html index 0a142d32d..1cdbbe5e6 100644 --- a/public/2016-09/index.html +++ b/public/2016-09/index.html @@ -703,6 +703,14 @@ $ ./delete-metadata-values.py -i ilrisubjects-delete-13.csv -f cg.subject.ilri - + +

2016-09-30

+ + diff --git a/public/index.xml b/public/index.xml index 4f64e2dee..227650658 100644 --- a/public/index.xml +++ b/public/index.xml @@ -636,6 +636,14 @@ $ ./delete-metadata-values.py -i ilrisubjects-delete-13.csv -f cg.subject.ilri - <ul> <li>Add <code>cg.identifier.ciatproject</code> to metadata registry in preparation for CIAT project tag</li> <li>Merge changes for CIAT project tag (<a href="https://github.com/ilri/DSpace/pull/282">#282</a>)</li> +<li>DSpace Test (linode02) became unresponsive for some reason, I had to hard reboot it from the Linode console</li> +</ul> + +<h2 id="2016-09-30">2016-09-30</h2> + +<ul> +<li>Deny access to REST API&rsquo;s <code>find-by-metadata-field</code> endpoint to protect against an upstream security issue (DS-3250)</li> +<li>There is a patch but it is only for 5.5 and doesn&rsquo;t apply cleanly to 5.1</li> </ul> diff --git a/public/post/index.xml b/public/post/index.xml index 538e5adce..a5bbcabc7 100644 --- a/public/post/index.xml +++ b/public/post/index.xml @@ -636,6 +636,14 @@ $ ./delete-metadata-values.py -i ilrisubjects-delete-13.csv -f cg.subject.ilri - <ul> <li>Add <code>cg.identifier.ciatproject</code> to metadata registry in preparation for CIAT project tag</li> <li>Merge changes for CIAT project tag (<a href="https://github.com/ilri/DSpace/pull/282">#282</a>)</li> +<li>DSpace Test (linode02) became unresponsive for some reason, I had to hard reboot it from the Linode console</li> +</ul> + +<h2 id="2016-09-30">2016-09-30</h2> + +<ul> +<li>Deny access to REST API&rsquo;s <code>find-by-metadata-field</code> endpoint to protect against an upstream security issue (DS-3250)</li> +<li>There is a patch but it is only for 5.5 and doesn&rsquo;t apply cleanly to 5.1</li> </ul> diff --git a/public/tags/notes/index.xml b/public/tags/notes/index.xml index 7b1f5e90f..58811cdca 100644 --- a/public/tags/notes/index.xml +++ b/public/tags/notes/index.xml @@ -636,6 +636,14 @@ $ ./delete-metadata-values.py -i ilrisubjects-delete-13.csv -f cg.subject.ilri - <ul> <li>Add <code>cg.identifier.ciatproject</code> to metadata registry in preparation for CIAT project tag</li> <li>Merge changes for CIAT project tag (<a href="https://github.com/ilri/DSpace/pull/282">#282</a>)</li> +<li>DSpace Test (linode02) became unresponsive for some reason, I had to hard reboot it from the Linode console</li> +</ul> + +<h2 id="2016-09-30">2016-09-30</h2> + +<ul> +<li>Deny access to REST API&rsquo;s <code>find-by-metadata-field</code> endpoint to protect against an upstream security issue (DS-3250)</li> +<li>There is a patch but it is only for 5.5 and doesn&rsquo;t apply cleanly to 5.1</li> </ul>