Evergreen Security releases: 3.8.4, 3.9.3, and 3.10.2

by Galen Charlton on May 19, 2023

The Evergreen Community announces the release of Evergreen 3.8.4, 3.9.3, and 3.10.2. These releases are available from the downloads page.

These releases include various bugfixes as well as fixes for three security issues. One security fix is for an SQL injection, one guards against malicious catalog search queries resulting in a denial of service, and one prevents unrestricted URL redirection upon OPAC login.

It is recommended that all Evergreen sites upgrade as soon as possible.

All of these new releases contain additional bug fixes unrelated to the security issue. For more information on the changes in these releases, please consult their release notes:

December 4, 4pm EST
Outreach Meeting
Join with Google Meet: https://meet.google.com/oip-dwca-bpc
Or dial: (US) +1 337-441-4148 PIN: 125363025#

Learn more about Meet at: https://support.google.com/a/users/answer/9282720
December 5, 2pm EST
DIG (Documentation Interest Group) Meeting
Agenda and meeting information here: https://wiki.evergreen-ils.org/doku.php?id=evergreen-docs:dig_meetings
December 9, 2pm EST
Collaborative code review / office hours
Hi Evergreen Community,

You are cordially invited to weekly collaborative code review sessions. In these, we'll meet for an hour to review recent pull requests, read code, run automated tests, try patches out, provide feedback, merge code that is ready... all the best stuff!

We can meet at https://princeton.zoom.us/my/sandbergja.

All skill levels welcome! You can join for as many or as few sessions as you'd like. If you have submitted a pull request that has been languishing and needs some review, please bring that along too. We're going for a fun, positive, and social tone. :-D

This is not to take the place of any of the other great ways that developers can get feedback on their work (e.g. bug squashing week, the new developers working group, typical review process), just a fun supplement.

Hope to see you there,

-Jane
https://princeton.zoom.us/my/sandbergja
December 10, 2pm EST
Cataloging Interest Group
The Cataloging Interest Group meets on the second Tuesday of each month.
For more information including meeting agendas and notes, see the group's Wiki page.

Monthly meetings are held using The Evergreen Project's zoom account.
Zoom Meeting Link:
https://us06web.zoom.us/j/89440379465?pwd=TVY4anVHZmN6ZlZQRXVTM3o5eUUyZz09
Meeting ID: 894 40379465
Passcode: 086021
Find your local audio call-in number (if needed): https://us06web.zoom.us/u/kcsI1s3S9P
December 10, 3pm EST
Developer Meeting
Held monthly in IRC: https://evergreen-ils.org/communicate/irc/

Agendas: https://wiki.evergreen-ils.org/doku.php?id=dev:meetings

Share this:

Related