drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mangelnde Rechteprüfung in myproxy
Name: |
Mangelnde Rechteprüfung in myproxy |
|
ID: |
FEDORA-2011-0514 |
|
Distribution: |
Fedora |
|
Plattformen: |
Fedora 14 |
|
Datum: |
Mi, 26. Januar 2011, 23:01 |
|
Referenzen: |
Keine Angabe |
|
Applikationen: |
myproxy |
|
Originalnachricht |
------------------------------------------------------------------------------- - Fedora Update Notification FEDORA-2011-0514 2011-01-18 20:51:17 ------------------------------------------------------------------------------- -
Name : myproxy Product : Fedora 14 Version : 5.3 Release : 1.fc14 URL : http://grid.ncsa.illinois.edu/myproxy/ Summary : Manage X.509 Public Key Infrastructure (PKI) security credentials Description : MyProxy is open source software for managing X.509 Public Key Infrastructure (PKI) security credentials (certificates and private keys). MyProxy combines an online credential repository with an online certificate authority to allow users to securely obtain credentials when and where needed. Users run myproxy-logon to authenticate and obtain credentials, including trusted CA certificates and Certificate Revocation Lists (CRLs).
------------------------------------------------------------------------------- - Update Information:
Release 5.3 fixes a myproxy-logon security bug in MyProxy versions 5.0-5.2 that disabled server identity verification:
The myproxy-logon program in MyProxy versions 5.0 through 5.2 does not enforce the check that the myproxy-server's certificate contains the expected hostname or identity. The impacted MyProxy versions are included in Globus Toolkit releases 5.0.0-5.0.2. This issue is addressed in MyProxy 5.3.
Full details are available: http://grid.ncsa.illinois.edu/myproxy/security/myproxy-adv-2011-01.txt
Other changes in this release: * if myproxy-logon GSI mutual authentication with the myproxy-server fails, try again with client-side anonymous authentication, in case the client-side GSI credentials are unacceptable to the myproxy-server (for example, signed by an untrusted CA), but the myproxy-server would accept an anonymous client show_bug.cgi?id=7103 * fix configure checks for globus_usage_stats_send, globus_usage_stats_send_array, and globus_gsi_proxy_handle_set_extensions when installing without existing Globus libraries in LD_LIBRARY_PATH show_bug.cgi?id=7098 * in myproxy-server-setup, look in /sbin and /usr/sbin for chkconfig or update-rc.d in case they're not in PATH * add certificate_issuer_subca_certfile option in myproxy-server.config show_bug.cgi?id=7119 * make all Globus Usage library errors non-fatal show_bug.cgi?id=7111 ------------------------------------------------------------------------------- - ChangeLog:
* Tue Jan 18 2011 Steve Traylen <steve.traylen@cern.ch> - 5.3-1 - New upstream 5.3. ------------------------------------------------------------------------------- -
This update can be installed with the "yum" update program. Use su -c 'yum update myproxy' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys ------------------------------------------------------------------------------- - _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-announce
|
|
|
|