XSS Vulnerability for TDS <= 5.5

An XSS vulnerability has been brought to our attention and fixed. This vulnerability only affects the DAP4 service for versions <= 5.5. We strongly recommend that you either:

1. Disable DAP4 services
2. or upgrade to the latest 5.6-SNAPSHOT version. This can be downloaded here. Please note that this newest snapshot now requires JDK 17. Additional JVM arguments are needed, which are in the CHRONICLE_CACHE variable here.

If you have any questions or concerns, please contact support-thredds@unidata.ucar.edu.

Best, The THREDDS development team.

TDS version 5.5 released

The NSF Unidata THREDDS development team released the THREDDS Data Server (TDS) version 5.5 on July 16th, 2024. This release contains a number of security upgrades to third party libraries, a variety of bug fixes, and several new features and improvements. It is recommended that all TDS users upgrade to this version.

[Read More]

EOL for TDS 4.6.x

Unidata ended support for all TDS versions prior to 5.x on August 31st, 2022. We will no longer be providing support for TDS 4.6.x in any capacity, including security upgrades. All TDS users are encouraged to upgrade to the latest release of TDS 5, which can be obtained from our downloads page.

For help upgrading to version 5, please refer to the documentation. To get help with issues or report bugs in version 5, contact support-thredds@unidata.ucar.edu or open an issue on our GitHub repository.

Unidata-hosted TDS Servers Upgrading to Version 5

During the week of August 8, 2022, the Unidata Program Center plans to upgrade the THREDDS Data Server (TDS) hosted at https://thredds.ucar.edu to version 5.x of the server software.

[Read More]

TDS versions 5.4 and 4.6.21 released

The THREDDS Data Server (TDS) version 5.4 release was announced on July 5th, 2022. This release contains a number of fixes for user-reported bugs, as well as security upgrades to third party libraries. It is recommended that all TDS 5.x users upgrade to this version. For more information, please see the GitHub release announcement. Additionally, version 4.6.21 of the TDS is now available. You can find the full release notes here. This is a security release only. TDS 4.6.x is no longer supported by the THREDDS development team, and it is recommended that users upgrade to v5.4. For more information on upgrading, please visit https://docs.unidata.ucar.edu/tds/5.4/userguide/upgrade.html. Note: The TDS downloads page has moved! You can now find TDS (5.x, 4.6.x, and Docker images) at https://downloads.unidata.ucar.edu/tds/.

News@Unidata
News and information from the Unidata Program Center
News@Unidata
News and information from the Unidata Program Center

Welcome

FAQs

Developers’ blog

Take a poll!

What if we had an ongoing user poll in here?

Browse By Topic
  • feed Community (427)
Browse by Topic
« October 2024
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
  
       
Today