Skip to content

Invenio v1.2.1
Compare
Choose a tag to compare
@tiborsimko tiborsimko released this 22 Jun 09:54
· 3213 commits to master since this release
v1.2.1
This tag was signed with the committer’s verified signature.
tiborsimko Tibor Šimko
GPG key ID: 1C39FE6CBA5A2B67
Learn about vigilant mode.
60f3ef4

Invenio v1.2.1 is released

Invenio v1.2.1 was released on May 21, 2015.

About

Invenio is a digital library framework enabling you to build your own
digital library or document repository on the web.

This stable release update is recommended to all Invenio sites using
v1.2.0 or previous releases.

Security fixes

  • BibAuthorID:
    • Improves URL redirecting by properly quoting all URL parts, in
      order to better protect against possible XSS attacks.
  • WebStyle:
    • Adds back the HttpOnly cookie attribute in order to better
      protect against potential XSS vulnerabilities. (#3064)

Improved features

  • installation:
    • Apache virtual environments are now created with appropriate
      WSGIDaemonProcess user value, taken from the configuration
      variable CFG_BIBSCHED_PROCESS_USER, provided it is set. This
      change makes it easier to run Invenio under non-Apache user
      identity.
    • Apache virtual environments are now created with appropriate
      WSGIPythonHome directive so that it would be easier to run
      Invenio from within Python virtual environments.

Bug fixes

  • BibDocFile:
    • Safer upgrade recipe for migrations from the old document storage
      model (used in v1.1) to the new document storage model (used in
      v1.2).
  • WebSearch:
    • Removes special behaviour of the "subject" index that was hard-
      coded based on the index name. Installations should rather
      specify wanted behaviour by means of configurable tokeniser
      instead.
    • Collection names containing slashes are now supported again.
      However we recommend not to use slashes in collection names; if
      slashes were wanted for aesthetic reasons, they can be added in
      visible collection translations. (#2902)
  • global:
    • Replaces invenio-demo.cern.ch by demo.invenio-software.org
      which is the new canonical URL of the demo site. (#2867)
  • installation:
    • Releases constraint on using an old version of h5py that was
      anyway no longer available on PyPI.
  • testutils:
    • Switches off SSL verification when running the test suite. Useful
      for Python-2.7.9 where self-signed SSL certificates (that are
      usually used on development installations) would cause apparent
      test failures. (#2868)

Download

Installation

Please follow the INSTALL file bundled in the distribution tarball.

Upgrade

Please proceed as follows:

a) Stop your bibsched queue and your Apache server.

b) Install the update::

 $ tar xvfz invenio-1.2.1.tar.gz
 $ cd invenio-1.2.1
 $ sudo rsync -a /opt/invenio/etc/ /opt/invenio/etc.OLD/
 $ sh /opt/invenio/etc/build/config.nice
 $ make
 $ make check-upgrade
 $ sudo -u www-data make install
 $ sudo rsync -a /opt/invenio/etc.OLD/ \
     --exclude invenio-autotools.conf \
     /opt/invenio/etc/ # (1)
 $ sudo -u www-data /opt/invenio/bin/inveniocfg --update-all
 $ sudo -u www-data /opt/invenio/bin/inveniocfg --upgrade

 (1) If you are upgrading from previous stable release series
     (v0.99, v1.0 or v1.1), please don't run this rsync command
     but diff, in order to inspect changes and adapt your old
     configuration to the new Invenio v1.2 release series.  For
     more information you may also want to consult release notes
     coming with Invenio v1.2.0.

c) Restart your Apache server and your bibsched queue.

Happy hacking and thanks for flying Invenio.

| Invenio Development Team
| Email: [email protected]
| IRC: #invenio on irc.freenode.net
| Twitter: http://twitter.com/inveniosoftware
| GitHub: http://github.com/inveniosoftware
| URL: http://invenio-software.org

Assets 2
Loading