Dear DSpace Community, We are pleased to announce the release of DSpace 9.1! This release provides security fixes and bug fixes to the 9.x platform. No new features are provided. As such, this release should be an easier upgrade for sites already running 9.x.
Download DSpace 9.1 <https://wiki.lyrasis.org/display/DSDOC9x/Release+Notes#ReleaseNotes-9.1ReleaseNotes> Security Fixes - Fix for CVE-2025-53621 <https://github.com/DSpace/DSpace/security/advisories/GHSA-jjwr-5cfh-7xwh> (moderate severity). XML External Entity (XXE) injection possible in import via Simple Archive Format (SAF) or import from external sources. See security advisory or mailing list “security notice” for details. - Fix for CVE-2025-53622 <https://github.com/DSpace/DSpace/security/advisories/GHSA-vhvx-8xgc-99wf> (moderate severity). Path traversal vulnerability in Simple Archive Format (SAF) package import via “contents” file. See security advisory or mailing list “security notice” for details. Major Bug fixes / improvements include: - Submission / Workflow enhancements and fixes - Fixed bug where importing a multi-paragraph abstract from PubMed would result in it being split into many abstracts in DSpace. (Donated by Atmire) - ArXiv importer began failing because its configuration didn't use the HTTPS URL. (Donated by Atmire) - Alphabetized all external sources in the import dropdown by source name. - Administrative enhancements and fixes - Fixed bug where community/collection subscription emails were not working as an error occurred when running "./subscription-send" (Donated by Alan Orth) - Deleting a Group now requires confirmation (via a confirmation popup). (Donated by Jukka Lipka) - Fixed several CSS / style issues found since upgrading to Bootstrap 5. (Donated by Atmire) - Fixed bug where Geospatial Map javascript code was loaded even when it was not used. (Donated by Atmire) - For a full list of changes and contributors in 9.1, see our Release Notes <https://wiki.lyrasis.org/display/DSDOC9x/Release+Notes#ReleaseNotes-9.1ReleaseNotes> New and improved Language support - German (Deutsch) language updates donated by Sascha Szot - Gujarati (ગુજરાતી) language translations donated by DSquare Technologies - Hungarian (Magyar) language updates donated by Zoltán Kanász-Nagy - Marathi (मराठी) language translations donated by DSquare Technologies - Portuguese (Português) language updates donated by Ricardo Saraiva - Russian (Русский) language translations donated by Arvo Consultores A total of 19 individuals contributed to 9.1. For a full list of changes and contributors in 9.1, see our Release Notes <https://wiki.lyrasis.org/display/DSDOC9x/Release+Notes#ReleaseNotes-9.1ReleaseNotes> . Would you like to contribute to a future DSpace release? DSpace is built and supported by community volunteers. We have no centralized development team. Therefore, we welcome contributions from anyone! Contributions may take the form of: - Contributing money to our DSpace Development Fund <https://wiki.lyrasis.org/display/DSPACE/Announcement%3A+DSpace+Development+Fund> - All funds go directly towards development in the next release(s), and you will be acknowledged on our DSpace Development Fund <https://wiki.lyrasis.org/display/DSPACE/Announcement%3A+DSpace+Development+Fund> page. - Contributing code - As a volunteer developer you can determine which issue ticket you’d like to work on. Join our weekly developer meetings <https://wiki.lyrasis.org/display/DSPACE/Developer+Meetings> or get in touch with Tim Donohue <https://wiki.lyrasis.org/display/~tdonohue> if you have any questions. Our next major release will be DSpace 10.0 <https://wiki.lyrasis.org/display/DSPACE/DSpace+Release+10.0+Status> (due in 2026). But, we also continue to support our last three major releases (currently 7.6.x, 8.x and 9.x). If you’d like more information on ongoing development, please consider joining our weekly developer meetings <https://wiki.lyrasis.org/display/DSPACE/Developer+Meetings>, or follow along by reading the public notes of past meetings. -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/dspace-tech/78973583-92c9-4637-9bd0-2fe4dd7d36b1n%40googlegroups.com.
