Skip to content
This repository has been archived by the owner on Sep 1, 2022. It is now read-only.

v4.6.15
Compare
Choose a tag to compare
@lesserwhirls lesserwhirls released this 18 Jun 13:30
· 1660 commits to landing since this release
v4.6.15
c166f38

netCDF-Java (maintenance) and the THREDDS Data Server (stable)

Version 4.6.15

This release addresses a critical bug in both the netCDF-Java library and the THREDDS Data Server. See the "Bug Fixes" section below for more details.

The NetCDF-Java/Common Data Model (CDM) library and THREDDS Data Server (TDS) version 4.6.15 release was announced June 17th, 2019. These are stable releases and contain a variety updates to 3rd party libraries which include security updates, and as such, the development team recommends these upgrades to anyone using the CDM or TDS. Please see the special note below about this and future 4.6.x versions of netCDF-Java.

Notices

This release addresses a critical bug in both the netCDF-Java library and the THREDDS Data Server.

See the "Bug Fixes" section below for more details.

Special note about netCDF-Java

As of this release, the current stable version of netCDF-Java is v5.3.3 (the current stable version of the TDS is v4.6.14). The netCDF-Java code base is now located at https://github.com/Unidata/netcdf-java. This release, v4.6.15, is a maintenance release of the 4.6.x line of development. For netCDF-Java issues, please open an issue on the new repository. Bug fixes will be applied first to v5.x and, if possible, may be applied to v4.6.x. However, the code base has diverged quite a bit, and bug fixes to the 4.6.x line may be impractical. Security fixes, such as upgrading third-party dependencies with known open vulnerabilities, will continue to be applied to the 4.6.x branch in support of the stable version of the TDS. Upon the release of a stable TDS v5.0, such security fixes to the 4.6.x branch will continue to be addressed for at least six months.

Java Web Start

Java Web Start has been deprecated as of Java 9, and has been removed in Java 11, the Long-term Release post Java 8. As of v5 of netCDF-Java and the TDS, Web Start files and features have been removed. We will continue to publish the current set of Java Web Start files (netCDFtools.jnlp and netCDFtoolsExtraJars.jnlp) for v4.6.x at least until the TDS has reached a stable v5.0 release. Java 8 public updates are currently scheduled to end December 2020, at which point Java 11 will be the only LTS release available from the current major providers (OpenJDK and Oracle), although some vendors have committed to patching OpenJDK 8 until sometime later. As of January 2021, it is our plan to remove all netcdf-java and TDS Web Start files from Unidata servers, and Web Start functionality in TDS v4.6 and prior will no longer work. Users will still be able to download ToolsUI and run the application locally. In preparation for this, the next version of the TDS (v4.6.15) will allow server administrators to turn off links to the Web Start viewers found on many Dataset catalog pages. The Godiva2 client will still be available as a Viewer for gridded datasets in v4.6.x of the TDS. While TDS v5 does not include Java Web Start based viewers, it does include the updated Godiva3 client, as well as a new Jupyter Notebook viewer service.

Downloads

netCDF-Java artifacts may be obtained from our Nexus artifacts server (https://artifacts.unidata.ucar.edu/repository/unidata-all/) using maven, gradle, or similar build tools. ToolsUI and netCDFAll may be found at https://www.unidata.ucar.edu/downloads/netcdf-java/

Documentation

Changes

New features and enhancements

  • None

Bug fixes

  • Addressed assorted security vulnerabilities in third-party libraries
  • Disabled many calls to System.out (hopefully that's the end of the HEY messages in various TDS log files)
  • Fixed FMRC caching of large variables in the proto dataset
  • Backport of Unidata/netcdf-java#320, Unidata/tds#89, in which iteration over multi-file PointFeatureCollection's of type STATION could result in hundreds of locked file handles in the RandomAccessFile cache, all pointing to a single file on disk.
  • Fixed critical bug in DiskCache2 which made the generation of unique file names timing sensitive.

The DiskCache2 bug is critical, and due to this, anyone using ucar.nc2.util.DiskCache2 from the netCDF-java library, or the NetcdfSubsetService in the TDS (which uses DiskCache2) should update immediately. THIS BUG MAY LEAD TO DATA CORRUPTION OR FILES WITH INCORRECT DATA AND/OR METADATA. For more information, please see DiskCache2 Issue in netCDF-Java Library.

For a full list of changes between v4.6.14 and v4.6.15, as well as links to the original GitHub issues, please see the GitHub issue tracker.

Real-world use by the user community is integral to the process of creating and refining these libraries. Please direct all potential security issues directly to Unidata using the address security@unidata.ucar.edu. Please send all other potential issues to the development team via the the user community mailing lists (netcdf-java@unidata.ucar.edu or thredds@unidata.ucar.edu), through the Unidata support system (support-netcdf-java@unidata.ucar.edu or support-thredds@unidata.ucar.edu), or on the THREDDS or netCDF-Java GitHub issue trackers.

Assets 2
Loading