drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mangelnde Rechteprüfung in myproxy
Name: |
Mangelnde Rechteprüfung in myproxy |
|
ID: |
FEDORA-2011-0512 |
|
Distribution: |
Fedora |
|
Plattformen: |
Fedora 13 |
|
Datum: |
Mi, 26. Januar 2011, 23:02 |
|
Referenzen: |
Keine Angabe |
|
Applikationen: |
myproxy |
|
Originalnachricht |
------------------------------------------------------------------------------- - Fedora Update Notification FEDORA-2011-0512 2011-01-18 20:51:14 ------------------------------------------------------------------------------- -
Name : myproxy Product : Fedora 13 Version : 5.3 Release : 1.fc13 URL : http://grid.ncsa.illinois.edu/myproxy/ Summary : Manage X.509 Public Key Infrastructure (PKI) security credentials Description : MyProxy is open source software for managing X.509 Public Key Infrastructure (PKI) security credentials (certificates and private keys). MyProxy combines an online credential repository with an online certificate authority to allow users to securely obtain credentials when and where needed. Users run myproxy-logon to authenticate and obtain credentials, including trusted CA certificates and Certificate Revocation Lists (CRLs).
------------------------------------------------------------------------------- - Update Information:
Release 5.3 fixes a myproxy-logon security bug in MyProxy versions 5.0-5.2 that disabled server identity verification:
The myproxy-logon program in MyProxy versions 5.0 through 5.2 does not enforce the check that the myproxy-server's certificate contains the expected hostname or identity. The impacted MyProxy versions are included in Globus Toolkit releases 5.0.0-5.0.2. This issue is addressed in MyProxy 5.3.
Full details are available: http://grid.ncsa.illinois.edu/myproxy/security/myproxy-adv-2011-01.txt
Other changes in this release: * if myproxy-logon GSI mutual authentication with the myproxy-server fails, try again with client-side anonymous authentication, in case the client-side GSI credentials are unacceptable to the myproxy-server (for example, signed by an untrusted CA), but the myproxy-server would accept an anonymous client show_bug.cgi?id=7103 * fix configure checks for globus_usage_stats_send, globus_usage_stats_send_array, and globus_gsi_proxy_handle_set_extensions when installing without existing Globus libraries in LD_LIBRARY_PATH show_bug.cgi?id=7098 * in myproxy-server-setup, look in /sbin and /usr/sbin for chkconfig or update-rc.d in case they're not in PATH * add certificate_issuer_subca_certfile option in myproxy-server.config show_bug.cgi?id=7119 * make all Globus Usage library errors non-fatal show_bug.cgi?id=7111 ------------------------------------------------------------------------------- - ChangeLog:
* Tue Jan 18 2011 Steve Traylen <steve.traylen@cern.ch> - 5.3-1 - New upstream 5.3. * Wed Jun 23 2010 Steve Traylen <steve.traylen@cern.ch> - 5.2-1 - New upstream 5.2. - Drop blocked-signals-with-pthr.patch patch. * Sat Jun 12 2010 Steve Traylen <steve.traylen@cern.ch> - 5.1-3 - Add blocked-signals-with-pthr.patch patch, rhbz#602594 - Updated init.d script rhbz#603157 - Add myproxy as requires to myproxy-admin to install clients. * Sat May 15 2010 Steve Traylen <steve.traylen@cern.ch> - 5.1-2 - rhbz#585189 rearrange packaging. clients moved from now obsoleted -client package to main package. libs moved from main package to new libs package. ------------------------------------------------------------------------------- -
This update can be installed with the "yum" update program. Use su -c 'yum update myproxy' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys ------------------------------------------------------------------------------- - _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-announce
|
|
|
|