What a week! We have an important security update, news about a few community award winners/nominees, some code changes and a community meetup in Panama:
Code:
- A vulnerability has been discovered in the Ushahidi Admin API. A fix has been issued, please update your deployments. Full details. (Crowdmap was updated.)
- Evan Sims and Brian Herbert moved Crowdmap to new infrastructure. Databases are now properly replicated, the webserver has been switched to Nginx and is being load balanced. Crowdmap will now be able to handle larger loads of traffic and should have less disruption to individual deployments in the future.
- Robbie issued the security patch for the API. He is also working on fixing google maps layers.
- Technical Help needed: Volunteers for further work on WMS layers or mapbox plugin. Someone to help with unit tests (this is boring but helpful). Check in the developers mailing list or join our Ushahidi skype community developer chat.
- Robert Colombo needs help on batch upload data with custom fields: data is not being imported from custom fields (fields are empty). Also Queries on custom fields and Plugin based fields (i.e. report status). Download pic and video names when download reports could be a must (for GIS analysis).
Community and Deployers:
- Deployment of the Week: Mind the News Gap
- With the assistance of Michael Coates, we have started a Security Working Group. Thanks to community members on the dev call for offering to assist. We will be collaborating the OWASP community to test, identify and patch potential security issues. Let us know if you would like to participate.
- The Our Rio20 project, created by Manu Kabahizi continues to make outreach noise online. Have you added your thoughts on #thefuturewewant?
- Congratulations to Anahi and team for the Internews project in the Central African Republic. It was featured on the HPDT website.
- Roger Huder mentions Ushahidi's use in Haiti in his recently published book Disaster Operations and Decision Making. For more research items, see the community research site.