News@Unidata

« Previous page | Main | Next page »

Showing entries tagged [tds]

Unidata is looking for a Software Developer

12 April 2022

The Unidata Program Center is hiring! We are looking for a scientific software developer to join our team in creating and maintaining software and data services to support the geosciences. Specifically, we are looking for a developer to join our open source efforts related to the suite of Thematic Real-time Environmental Distributed Data Services (THREDDS) projects.

[Read More]

Posted by Unidata News

Email this

Upgrade NOW: TDS 5.4-SNAPSHOT to address Spring4Shell CVE

04 April 2022

All releases of TDS 5 prior to the March 31, 2022 TDS 5.4-SNAPSHOT release are vulnerable to the Spring Framework library Spring4Shell exploit [cve-2022-22965].

We are aware of active hacking attempts against Internet-based unpatched TDS servers, with one reported successful attempt in the community. Such attempts occurred as early as Wednesday March 30 before Spring officially announced the existence of the vulnerability.

If you haven't done so already, we strongly encourage 5.x users to upgrade to the latest snapshot immediately.

[Read More]

Posted by admin [ Comments [2] ]

Email this

TDS version 4.6.20 released

16 February 2022

The THREDDS development team released version 4.6.20 of the TDS on February 16th, 2022. This release contains various upgrades to third party libraries that address security exploits, as well as a bug fix in the WMS service. You can find the full release notes here.

Note: The TDS downloads page has moved! You can now find TDS jar files at https://downloads.unidata.ucar.edu/tds/

For TDS 5.x users - the 5.4 release will be ready soon, but we are still working to address a number of reported bugs prior to the release date, which remains TBA. In the meantime, please continue to the SNAPSHOT release available on the TDS downloads page.

Posted by Hailey Johnson

Email this

TDS versions 4.6.19 and 5.3 released

20 December 2021

In response to vulnerabilities in the log4j library, the THREDDS development team has released new versions of the TDS 4.6.x and 5.x. TDS 4.6.19 and TDS 5.3 user log4j 2.17.0, and address CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105.[Read More]

Posted by Hailey Johnson

Email this

THREDDS Data Server Version 4.6.18 Released

10 December 2021

The Unidata THREDDS Development Team released an updated version of the THREDDS Data Server (TDS) (and bundled netCDF-Java/Common Data Model (CDM) library) on December 10th, 2021. This release addresses a severe third party library security vulnerability. TDS 4.6.x administrators are encouraged to upgrade to version 4.6.18.

[Read More]

Posted by Sean Arms