From 4689c96c165e892059382f444582256f031f4d96 Mon Sep 17 00:00:00 2001 From: Tibor Simko Date: Thu, 21 May 2015 16:57:58 +0200 Subject: [PATCH] Invenio v1.1.6 Signed-off-by: Tibor Simko --- INSTALL | 30 +++++++-------- NEWS | 41 ++++++++++++++++++++ RELEASE-NOTES | 105 ++++++++++++++++++++++++++++++++------------------ 3 files changed, 123 insertions(+), 53 deletions(-) diff --git a/INSTALL b/INSTALL index 1b11af1891..8e1342c79d 100644 --- a/INSTALL +++ b/INSTALL @@ -5,7 +5,7 @@ About ===== This document specifies how to build, customize, and install Invenio -v1.1.5 for the first time. See RELEASE-NOTES if you are upgrading +v1.1.6 for the first time. See RELEASE-NOTES if you are upgrading from a previous Invenio release. Contents @@ -283,13 +283,13 @@ Contents ---------------- $ cd $HOME/src/ - $ wget http://invenio-software.org/download/invenio-1.1.5.tar.gz - $ wget http://invenio-software.org/download/invenio-1.1.5.tar.gz.md5 - $ wget http://invenio-software.org/download/invenio-1.1.5.tar.gz.sig - $ md5sum -c invenio-1.1.5.tar.gz.md5 - $ gpg --verify invenio-1.1.5.tar.gz.sig invenio-1.1.5.tar.gz - $ tar xvfz invenio-1.1.5.tar.gz - $ cd invenio-1.1.5 + $ wget http://invenio-software.org/download/invenio-1.1.6.tar.gz + $ wget http://invenio-software.org/download/invenio-1.1.6.tar.gz.md5 + $ wget http://invenio-software.org/download/invenio-1.1.6.tar.gz.sig + $ md5sum -c invenio-1.1.6.tar.gz.md5 + $ gpg --verify invenio-1.1.6.tar.gz.sig invenio-1.1.6.tar.gz + $ tar xvfz invenio-1.1.6.tar.gz + $ cd invenio-1.1.6 $ ./configure $ make $ make install @@ -334,19 +334,19 @@ Contents sources. (The built files will be installed into different "target" directories later.) - $ wget http://invenio-software.org/download/invenio-1.1.5.tar.gz - $ wget http://invenio-software.org/download/invenio-1.1.5.tar.gz.md5 - $ wget http://invenio-software.org/download/invenio-1.1.5.tar.gz.sig + $ wget http://invenio-software.org/download/invenio-1.1.6.tar.gz + $ wget http://invenio-software.org/download/invenio-1.1.6.tar.gz.md5 + $ wget http://invenio-software.org/download/invenio-1.1.6.tar.gz.sig Fetch Invenio source tarball from the distribution server, together with MD5 checksum and GnuPG cryptographic signature files useful for verifying the integrity of the tarball. - $ md5sum -c invenio-1.1.5.tar.gz.md5 + $ md5sum -c invenio-1.1.6.tar.gz.md5 Verify MD5 checksum. - $ gpg --verify invenio-1.1.5.tar.gz.sig invenio-1.1.5.tar.gz + $ gpg --verify invenio-1.1.6.tar.gz.sig invenio-1.1.6.tar.gz Verify GnuPG cryptographic signature. Note that you may first have to import my public key into your keyring, if you @@ -358,11 +358,11 @@ Contents warning that may follow after the signature has been successfully verified. - $ tar xvfz invenio-1.1.5.tar.gz + $ tar xvfz invenio-1.1.6.tar.gz Untar the distribution tarball. - $ cd invenio-1.1.5 + $ cd invenio-1.1.6 Go to the source directory. diff --git a/NEWS b/NEWS index 7f3ed78766..b1869c857b 100644 --- a/NEWS +++ b/NEWS @@ -6,6 +6,47 @@ releases. For more information about the current release, please consult RELEASE-NOTES. For more information about changes, please consult ChangeLog. +Invenio v1.1.6 -- released 2015-05-21 +------------------------------------- + +Security fixes +~~~~~~~~~~~~~~ + ++ WebStyle: + + - Adds back the `HttpOnly` cookie attribute in order to better + protect against potential XSS vulnerabilities. (#3064) + +Improved features +~~~~~~~~~~~~~~~~~ + ++ installation: + + - Apache virtual environments are now created with appropriate + `WSGIDaemonProcess` user value, taken from the configuration + variable `CFG_BIBSCHED_PROCESS_USER`, provided it is set. This + change makes it easier to run Invenio under non-Apache user + identity. + + - Apache virtual environments are now created with appropriate + `WSGIPythonHome` directive so that it would be easier to run + Invenio from within Python virtual environments. + +Bug fixes +~~~~~~~~~ + ++ global: + + - Replaces `invenio-demo.cern.ch` by `demo.invenio-software.org` + which is the new canonical URL of the demo site. (#2867) + ++ testutils: + + - Switches off SSL verification when running the test suite. Useful + for Python-2.7.9 where self-signed SSL certificates (that are + usually used on development installations) would cause apparent + test failures. (#2868) + Invenio v1.0.9 -- released 2015-05-21 ------------------------------------- diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 6264a68c7a..93cc7042f4 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -1,55 +1,79 @@ --------------------------------------------------------------------- -Invenio v1.1.5 is released -March 2, 2015 -http://invenio-software.org/ --------------------------------------------------------------------- +============================ + Invenio v1.1.6 is released +============================ -Invenio v1.1.5 was released on March 2, 2015. +Invenio v1.1.6 was released on May 21, 2015. -This stable release update is recommended to all Invenio sites using -v1.1.4 or previous releases. +About +----- -What's new: ------------ +Invenio is a digital library framework enabling you to build your own +digital library or document repository on the web. - *) BibCirculation: get_book_cover quick fix (#2578 #2653); fix for - wrong non-borrower message (#2597) +This old stable release update is recommended to all Invenio sites +using v1.1.5 or previous releases. - *) OAIHarvest: remove_duplicates and regexp fixes (#2300 #2608) +Security fixes +-------------- + ++ WebStyle: + + - Adds back the `HttpOnly` cookie attribute in order to better + protect against potential XSS vulnerabilities. (#3064) - *) WebBasket: better formatting of deletion message (#2449) +Improved features +----------------- - *) docker: initial release (#2736) ++ installation: - *) docs: initial release of CONTRIBUTING guide (#2163) + - Apache virtual environments are now created with appropriate + `WSGIDaemonProcess` user value, taken from the configuration + variable `CFG_BIBSCHED_PROCESS_USER`, provided it is set. This + change makes it easier to run Invenio under non-Apache user + identity. - *) installation: MathJax distribution location update (#2732); - explicit jQuery plugin versions (#11 #2655); disable SSLv2/SSLv3 - in Apache config (#2515) + - Apache virtual environments are now created with appropriate + `WSGIPythonHome` directive so that it would be easier to run + Invenio from within Python virtual environments. -Download: +Bug fixes --------- - - - ++ global: + + - Replaces `invenio-demo.cern.ch` by `demo.invenio-software.org` + which is the new canonical URL of the demo site. (#2867) + ++ testutils: -Installation notes: -------------------- + - Switches off SSL verification when running the test suite. Useful + for Python-2.7.9 where self-signed SSL certificates (that are + usually used on development installations) would cause apparent + test failures. (#2868) + +Download +-------- + +- http://invenio-software.org/download/invenio-1.1.6.tar.gz +- http://invenio-software.org/download/invenio-1.1.6.tar.gz.md5 +- http://invenio-software.org/download/invenio-1.1.6.tar.gz.sig + +Installation +------------ Please follow the INSTALL file bundled in the distribution tarball. -Upgrade notes: --------------- +Upgrade +------- Please proceed as follows: - a) Stop your bibsched queue and your Apache server. +a) Stop your bibsched queue and your Apache server. - b) Install the update: +b) Install the update:: - $ tar xvfz invenio-1.1.5.tar.gz - $ cd invenio-1.1.5 + $ tar xvfz invenio-1.1.6.tar.gz + $ cd invenio-1.1.6 $ sudo rsync -a /opt/invenio/etc/ /opt/invenio/etc.OLD/ $ sh /opt/invenio/etc/build/config.nice $ make @@ -61,13 +85,18 @@ Please proceed as follows: $ sudo -u www-data /opt/invenio/bin/inveniocfg --update-all $ sudo -u www-data /opt/invenio/bin/inveniocfg --upgrade - Notes: + (1) If you are upgrading from previous stable release series + (v0.99 or v1.0), please don't run this rsync command but + diff, in order to inspect changes and adapt your old + configuration to the new Invenio v1.1 release series. - (1) If you are upgrading from previous stable release series - (v0.99 or v1.0), please don't run this rsync command but diff, - in order to inspect changes and adapt your old configuration - to the new Invenio v1.1 release series. +c) Restart your Apache server and your bibsched queue. - c) Restart your Apache server and your bibsched queue. +Happy hacking and thanks for flying Invenio. -- end of file - +| Invenio Development Team +| Email: info@invenio-software.org +| IRC: #invenio on irc.freenode.net +| Twitter: http://twitter.com/inveniosoftware +| GitHub: http://github.com/inveniosoftware +| URL: http://invenio-software.org