Changes in DSpace 3.6

Changes in DSpace 3.5

Changes in DSpace 3.4

This release  includes the following security fixes. All of these tickets require a valid JIRA account to view the details:

• DS-1702 - Cross-site scripting (XSS injection) is possible in JSPUI Recent Submissions listings
• DS-2044 - Cross-site scripting (XSS injection) is possible in JSPUI Discovery search form
  
• DS-2445 - XMLUI Directory Traversal Vulnerabilities
  • Also resolves related, minor theme access issues DS-1896 and DS-2130.
• DS-2448 - JSPUI Directory Traversal Vulnerability

Changes in DSpace 3.3

Changes in DSpace 3.2

This release also includes the following security fix:

• DS-1603 - Resolves a security issue in JSPUI

Changes in DSpace 3.1

Changes in DSpace 3.0