[OPEN-ILS-GENERAL] IMPORTANT: Security releases of Evergreen 2.3.3, 2.2.5, and 2.1.5

Galen Charlton gmc at esilibrary.com
Wed Jan 16 15:01:48 EST 2013


On behalf of the Evergreen contributors, the 2.3.x release maintainer (Bill
Erickson), the 2.2.x release maintainer (Lebbeous Fogle-Weekley), and the
2.1.x release maintainer, (Dan Scott), we are pleased to announce the
release of Evergreen 2.3.3, 2.2.5, and 2.1.5.

Links to downloads and documentation can be found at

http://evergreen-ils.org/downloads.php and
http://evergreen-ils.org/opensrf.php.

The 2.3.3 and 2.2.5 releases also contains bugfixes not related to security.

THESE RELEASES CONTAIN SECURITY UPDATES, so you will want to upgrade as
soon as possible.

In particular, the pcrud, cstore, and rstore services are susceptible to an
SQL injection attack.  Any user, including library staff and patrons, who
can authenticate to Evergreen can potentially make arbitrary SQL run on the
Evergreen database.

More information about the security updates and other bugfixes can be found
in the ChangeLogs:

2.3.3: http://evergreen-ils.org/downloads/ChangeLog-2.3.2-2.3.3
2.2.5: http://evergreen-ils.org/downloads/ChangeLog-2.2.4-2.2.5
2.1.5: http://evergreen-ils.org/downloads/ChangeLog-2.1.4-2.1.5

If you don’t wish to upgrade Evergreen outright to the latest version,
sites running 2.1, 2.2, or 2.3 releases today can get the benefit of the
security updates by installing a hot fix.  The procedure for doing is
described at:

http://evergreen-ils.org/blog/?p=884

-- 
Galen Charlton
Manager of Implementation
Equinox Software, Inc. / The Open Source Experts
email:  gmc at esilibrary.com
direct: +1 770-709-5581
cell:   +1 404-984-4366
skype:  gmcharlt
web:    http://www.esilibrary.com/
Supporting Koha and Evergreen: http://koha-community.org &
http://evergreen-ils.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://libmail.georgialibraries.org/pipermail/open-ils-general/attachments/20130116/62926385/attachment.htm>


More information about the Open-ils-general mailing list
http://list.evergreen-ils.org/pipermail/open-ils-general/2013-January/008003.html
list.evergreen-ils.org
CC-MAIN-2023-40
5569
application/http; msgtype=response
sha1:NOZ3UVONJQOSYYU752A4NBHTU3XYMF3T
<urn:uuid:dffb506f-6f68-40f2-b28a-2aa8d63c08b1>
2023-09-25T13:09:51Z
168.25.130.32
text/html
sha1:QBWJZ5W3MGRKGFYIXKNS6LLGN2QB6UFX
<urn:uuid:851bf9de-2dc8-4c9e-b564-b8764492339d>
http://list.evergreen-ils.org/pipermail/open-ils-general/2013-January/008003.html
response
<urn:uuid:274c7f4f-96ad-41b2-a001-2721fb6084b7>
isPartOf: CC-MAIN-2023-40
publisher: Common Crawl
description: Wide crawl of the web for September/October 2023
operator: Common Crawl Admin (info@commoncrawl.org)
hostname: ip-10-67-67-20
software: Apache Nutch 1.19 (modified, https://github.com/commoncrawl/nutch/)
robots: checked via crawler-commons 1.5-SNAPSHOT (https://github.com/crawler-commons/crawler-commons)
format: WARC File Format 1.1
conformsTo: https://iipc.github.io/warc-specifications/specifications/warc-format/warc-1.1/