MyProxy 3.6 released


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

MyProxy 3.6 is now available from the MyProxy web site
(http://myproxy.ncsa.uiuc.edu/).

This release addresses a security vulnerability in how temporary files
are handled in myproxy-admin-adduser, announced in Globus Security
Advisory 2006-02.  That advisory also documents a separate
vulnerability in grid-ca-sign, which is used by myproxy-admin-adduser.
Additionally, Globus Security Advisory 2006-01 documents a temporary
file security vulnerability in grid-proxy-init, which is called by
myproxy-init.  All MyProxy users are encouraged to apply the relevant
Globus Toolkit update packages.  The advisories are available at:

http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html
http://www.globus.org/mail_archive/security-announce/2006/08/msg00001.html

Documentation for the new features in this release is available on the
MyProxy web site (updates currently in progress).  We appreciate your
feedback on the MyProxy software.  Please submit questions, bug
reports, feature requests, etc., to our bug tracking system at
<http://bugzilla.ncsa.uiuc.edu/>.

Changes:
  * fix insecure temporary file handling in myproxy-admin-adduser
  * support credential renewal via the MyProxy CA using
    myproxy-server.config authorized_renewers/default_renewers options
  * provide an access control list for storing credentials via the
    myproxy-server.config accepted_credentials_mapfile option
  * fix insecure input handling in myproxy-get-delegation.cgi example
  * support VOMS attributes in myproxy-server.config policies
  * in CA, issue certificates valid starting 5 minutes in the past to
    account for possible clock skew between hosts
  * add check_multiple_credentials option in myproxy-server.config
    to allow clients to retrieve a credential for a given username
    even if the associated "credential name" isn't provided (via
    myproxy-logon --credname)

Compatibility:
* MyProxy clients v0.2alpha3 (11 Oct 2000) and later
* Globus Toolkit 2.4, 3.0, 3.2, and 4.0
* Java CoG 1.1 and later

MD5 checksum:
3bcd127ea0a223a969ce29d3631296f7  myproxy-3.6.tar.gz
SHA1 checksum:
9d04a3dfc36f6b996c24d71bcb432e50c61e2d66  myproxy-3.6.tar.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (Darwin)
Comment: Processed by Mailcrypt 3.5.8 <http://mailcrypt.sourceforge.net/>

iD8DBQFE4hDUKbhEzLSEP8YRAhh8AJ0ZzEn1wI6QZaBt2IFM00ocKg9ACACdHc1/
EbqWqkSmr8S5XE4pr9VlgYk=
=dPtH
-----END PGP SIGNATURE-----



Other Mailing lists | Author Index | Date Index | Subject Index | Thread Index