LexEVS Meeting Minutes - 2023.09.27

• Security team has flagged EVS stage host( nciws-p803) for JQuery vulnerability with full details as per below.

136929 (1) - JQuery 1.2 < 3.5.0 Multiple XSS - REMAINS
nciws-p803.nci.nih.gov (tcp/3000/www):
URL : http://nciws-p803.nci.nih.gov:3000/javascripts/jquery-1.11.1.min.js
Installed version : 1.11.1
Fixed version : 3.5.0

Eric asked us to remove it from lower tiers but we found no evidence of it there. It should be removed from Stage

Jason sent email message to remove the jar from Stage.

NCI-RITM0470132

Status:

• Expected next week - Chuck wants info on Corretto.  We don''t think it will be an issue with the JDK but there is a small risk.  We can wait for the new Prod.

• Tracy to send Chuck email asking to build Prod VM before migration 

See ticket chart (above)

• What is the risk in case of shutdown? Mark to get a definitive answer on staffing and impact on data deployments/software deployments = per email will be shutdown, only bare minimum. 
• We need to build risk list, what projects will be impacted by shutdown?

LexEVS Sprint Status

• • Discussion Points:

    • Vulnerable dependencies - in progress (90%)
      • Only unit testing remaining
    • -- on Dev, resolving issues there
    • Ticket 487 - digital styling - Prod requested
    • Feedback form - in progress, waiting for survey approval

Statistics Dashboard

Discussion Points: 

• Statistics - Sumo Logic
  
  • Migration to DataDog October-March
  • Queries turned over to migration group

Decision Points:

• On Hold

Discussion Points

• Waiting on AWS team

Decision Points:

Team Absences

Mayo Team - 

MSC - possible shutdown

Leidos - 

QA -

Gov -  Possible shutdown

Discussion Points:

Discussed new mapping - Tracy sent Chao and Eric information

Decision Points:

Discussion Points: 

• NCIt processing - delay due to FTP issue. Fixed now.  
  • Ready for review tomorrow, hopefully
  • Deployment to Stage on Monday - may be impacted by shutdown

Decision Points:

Discussion Points: 

• Prog and Reg completed for 1.2.3 Report Exporter on Stage
• CTS2 2.2.2 completed on Stage
• Reg on Stage for data on EVSRest
• Data sync on Dev and QA being tested

Decision Points: 

Terminology Updates and Schedule 

Discussion Points: 

Decision Points: 

Vocabulary Name in LexBIG

Short Name

Version identifier

Date the vocabulary arrived for processing

Approximate date the vocabulary version is scheduled to move to staging

Approximate date the vocabulary version is scheduled to move to production

Safran, Tracy