Hi Melanie

We are using 2.6.3 and upgrading to 2.6.6 tomorrow. We have not yet tested this ourselves but hope to in the next week.

However if TurnItIn are saying there is an issue we will hold back from installing the security patch until TurnItIn say it’s good to go, since TII is so vital, especially as the end of semester assignment hand-in period is just around the corner.

Cheers

Matt

________________
-University of Southampton Virtual Learning: Voted Best in Russell Group 2014: http://bit.ly/1qDv8Ap

-Matthew Deeprose
-Managed Learning Environment Team, iSolutions, University of Southampton.
[log in to unmask] |[int]-x23663-[ext]-023 8059 3663
-http://www.southampton.ac.uk/isolutions/computing/elearn/blackboard/

-Team twitter: https://twitter.com/uos_mle | Team blog: http://blog.soton.ac.uk/mle

-Team services: http://mle.southampton.ac.uk/

From: Blackboard/Courseinfo userslist [mailto:[log in to unmask]] On Behalf Of Melanie Barrand
Sent: 18 November 2015 09:43
To: [log in to unmask]
Subject: Re: TurnItIn and Security Advisory - LRN-86495 - Weak TLS Protocol Vulnerability

Hello Matt

Thanks for the info. We have CU3 (and the latest Building Blocks including LDAP) on our Testing environment. No problems so far with Turnitin.

We are self hosted Blackboard Oct 14 with Turnitin Basic 2.6.6. Are you on Basic or Direct?

Best wishes

Melanie Barrand
eLearning (VLES) Team | University of Leeds

Website: www.leeds.ac.uk/vle

For the latest VLE news, hints, tips & updates visit our blog: http://vleservice.wordpress.com/,follow us on Twitter: https://twitter.com/leedsvlesupport or subscribe to the mailing list:http://www.leeds.ac.uk/vle/maillist/

From: Blackboard/Courseinfo userslist <[log in to unmask]> on behalf of "Deeprose M." <[log in to unmask]>
Reply-To: Blackboard/Courseinfo userslist <[log in to unmask]>
Date: Tuesday, 17 November 2015 13:54
To: "[log in to unmask]" <[log in to unmask]>
Subject: TurnItIn and Security Advisory - LRN-86495 - Weak TLS Protocol Vulnerability

Hi All

Just a warning to anyone that uses the TurnItIn Building Block with Blackboard.

You may have noticed that Blackboard announced “Security Advisory - LRN-86495 - Weak TLS Protocol Vulnerability in LDAP Authenticator (Java 7) Could Allow Information Exposure” at https://blackboard.secure.force.com/btbb_articleview?id=kAA70000000CbBH just over a month ago. We have been looking at implementing this.

A very small note in the Blackboard instructions states “Clients should test this security patch with third party B2s. Due to the fact that Blackboard may be using different protocol versions, 3rd party B2s may be incompatible with the security patch.”

We have been contacting the companies from which we licence building blocks and TurnItIn have responded:

“I have be informed that our product team is working with Blackboard on this matter as it seems that when the new patch is installed we are blocking connections from Blackboard due to an incompatibility with some of the ciphers used.

It would be advisable to delay updating to this patch until a resolution have been found.”

Thought everyone that uses TurnItIn would want to be aware of that…

Cheers

Matt

________________
-University of Southampton Virtual Learning: Voted Best in Russell Group 2014: http://bit.ly/1qDv8Ap

-Team twitter: https://twitter.com/uos_mle | Team blog: http://blog.soton.ac.uk/mle

-Team services: http://mle.southampton.ac.uk/