DataSource Technical Bulletin December 2021



The DataSource Technical Monthly Bulletin is updated monthly, conveying relevant technical information and announcements pertaining to the operations of DataSource.  


New Version of ContentConnector

Log4j version update

A new version of ContentConnector (2.2.15) will be released by the end of December.

The main change is the new ContentConnector has the updated Log4j version 2.17. 

The link to download the new version will be added to the Extranet Documentation Download ContentConnector section.

NOTE: The previous ContentConnector had Log4j version 1.x that does not have the JNDI lookups feature and thus should not be vulnerable to the new attack. Applications using Log4j 1.x are only vulnerable to this attack when they use JNDI in their configuration (see https://www.kb.cert.org/vuls/id/930724). 

We recommend auditing your Log4j configuration file to ensure it has no JMSAppender configured. Log4j 1.x configurations without JMSAppender are not impacted by this vulnerability. The file in question is contentConnector-xxxx/configuration/log4j.xml.

If you find a JMSAppender, we suggest sharing this with your IT security team as 1WorldSync (formerly CNET Content Solutions) does not define any JMSAppenders for the ContentConnector. 

The message lookups feature has been completely removed in version Log4j 2.17.


PDM Audit

PDM Audit is intended to improve the format of specifications and attribute structure. Most of the categories are being revisited starting with the most popular ones.  

November

Categories finished in November:
  • Notebooks (AB)

December

Categories in progress or planned in December:

  • Hygiene (2D)

 

 

Attribute Modifications

  Please reference the downloadable spreadsheet below featuring all performed and planned attribute modifications from August 2021 and September 2021.  

 

Attribute Deactivation Feed

  The following links are feeds that include all searchable attributes, both active and deactivated.  This will enable DataSource customers to see what attributes have changed and to check if these changes have been properly reflected within their databases. The feed is available in two different file formats.  

 

Questions?

If you have any questions about the DataSource Technical Bulletin, you can submit your question through the Extranet in the Support -> Contact Support section by clicking here.