News@Unidata

« Previous day (Aug 12, 2024) | Main

Recent Changes at the NSF Unidata Program Center

13 August 2024

In the wake of the U. S. National Science Foundation’s award of financial support in response to NSF Unidata’s most recent core program funding proposal, there have been several changes at the Program Center. This article attempts to explain the Program’s current situation, what changes have been made, and what we are planning to do next.

[Read More]

Posted by Unidata News [ Comments [0] ]

Email this

XSS Vulnerability for TDS <= 5.5

13 August 2024

An XSS vulnerability has been brought to our attention and fixed. This vulnerability only affects the DAP4 service for versions <= 5.5. We strongly recommend that you either:

1. Disable DAP4 services
2. or upgrade to the latest 5.6-SNAPSHOT version. This can be downloaded here. Please note that this newest snapshot now requires JDK 17. Additional JVM arguments are needed, which are in the CHRONICLE_CACHE variable here.

If you have any questions or concerns, please contact support-thredds@unidata.ucar.edu.

Best, The THREDDS development team.

Posted by Tara Drwenski [ Comments [0] ]