Monday, March 8, 2010

OSG 1.2.7 Release Announcement

OSG Operations and Integration are pleased to announce the release of OSG version 1.2.7.

This is a medium priority security update that corrects issues in several components. The fixes include updates to several components to properly handle null bytes in a DN handle and a fix for a DOS attack on squid.

This release also updates several software components, see the complete list below.

* wget
* osg-config
* osg-version
* Java 1.5
* Java 1.6
* OpenLDAP
* GFAL and lcg-utils (no version change, but it was rebuilt to match the security update for OpenLDAP)

The components that have been updated may also include bugfixes. Please see the VDT release notes for more details:

Complete update instructions can be found at

If you are updating from a version prior to 1.2.0 or installing the OSG stack for the first time see the full installation instructions at