Fedora 25 MyProxy Security Update: Critical Improvements and Fixes

MyProxy is open source software for managing X.509 Public Key Infrastructure

(PKI) security credentials (certificates and private keys). MyProxy

combines an online credential repository with an online certificate

authority to allow users to securely obtain credentials when and where needed.

Users run myproxy-logon to authenticate and obtain credentials, including

trusted CA certificates and Certificate Revocation Lists (CRLs).

globus-ftp-client * Adapt to Perl 5.26 - POSIX::tmpnam() no longer available *

Remove some redundant tests to reduce test time globus-gass-cache-program *

GT6 update globus-gass-copy * Don't attempt sshftp data protection without

creds (9.24) * Checksum verification based on contribution from IBM (9.24) * Fix

uninitialized field related crash (9.25) * Remove checksum data from public

handle (9.26) * Prevent some race conditions (9.27) globus-gram-job-manager *

Default to running personal gatekeeper on an ephemeral port globus-gridftp-server * New error message format (12.0) * Configuration database (12.0) *

Better delay for end of session ref check (12.1) * Fix tests when getgroups()

does not return effective gid (12.2) globus-gssapi-gsi * Don't unlock unlocked

mutex (12.14) * Remove legacy SSLv3 support (12.15) * Test fixes (12.16) * Drop

patch globus-gssapi-gsi-mutex-unlock.patch (fixed upstream 12.14) globus-io *

Remove legacy SSLv3 support globus-net-manager * Fix .pc typo * Drop patch

globus-net-manager-pkgconfig.patch (fixed upstream) globus-xio * Don't rely on

globus_error_put(NULL) to be GLOBUS_SUCCESS (5.15) * Fix crash in error handling

in http driver (5.16) globus-xio-gsi-driver * Fix crash when checking for

anonymous GSS name when name comparison fails globus-xio-pipe-driver * Fix .pc

typo globus-xio-udt-driver * Don't force --static flag to pkg-config * Drop

some BuildRequires no longer needed with above change * Fix undefined symbols

during linking myproxy * Fix error check (6.1.26) * Remove legacy SSLv3

support (6.1.27)

su -c 'dnf upgrade myproxy' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org