Page History

...

This release addresses the following security issues discovered in DSpace 4.x and below:

• security fix:
  • [HIGH MEDIUM SEVERITY]  XML External Entity (XXE) vulnerability in pdfbox. (DS-3309 - requires a JIRA account to access)
    
    • Reported by Seth Robbins
      
• other fixes:
  • It was not possible to send mails using an ssl secured connection to the mail server (DS-2702)
   

...