opensource/galaxy
3
0
Fork 0
mirror of https://github.com/galaxyproject/galaxy.git synced 2026-10-24 12:13:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6892 from martenson/security-notes

Browse Source 
[18.09] add discovered tool vulnerabilities to RN
This commit is contained in:
Dannon
2018-10-17 13:21:22 -04:00
committed by GitHub
parent 89fbe9c934 fa212c3c31
commit 0aca12ce96
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/source/releases/18.09_announce.rst
+16
View File
@@ -68,6 +68,22 @@ Tracked as GX-2018-0006. Servers running Galaxy 18.05 should be updated as soon
See `the public announcement for full details
<http://announce.list.galaxyproject.org/GX-2018-0006-Unauthorized-File-System-Operations-via-New-Upload-API-td4639432.html>`__.
Tool Vulnerabilities Discovered
-------------------------------
Older versions of certain repositories in the Tool Shed were identified as vulnerable. All of these are owned and maintained by the ``iuc``. The repository list follows:
* ``gemini_query``
* ``gemini_stats``
* ``gemini_gene_wise``
* ``iqtree``
* ``shovill``
* ``fastq_dump``
* ``sam_dump``
* ``sra_pileup``
If you have any of these repositories installed in your Galaxy, please update them to the latest revision immediately and disable/uninstall all older versions.
Deprecation Notice
==================