OSG 1.2.7 Release Announcement

OSG Operations and Integration are pleased to announce the release of OSG version 1.2.7.

This is a medium priority security update that corrects issues in several components. The fixes include updates to several components to properly handle null bytes in a DN handle and a fix for a DOS attack on squid.

This release also updates several software components, see the complete list below.

* wget
* osg-config
* osg-version
* Java 1.5
* Java 1.6
* OpenLDAP
* GFAL and lcg-utils (no version change, but it was rebuilt to match the security update for OpenLDAP)

The components that have been updated may also include bugfixes. Please see the VDT release notes for more details: http://vdt.cs.wisc.edu/releases/2.0.0/release-p14.html

Complete update instructions can be found at https://twiki.grid.iu.edu/bin/view/ReleaseDocumentation/OSG127UpdateInstructions

If you are updating from a version prior to 1.2.0 or installing the OSG stack for the first time see the full installation instructions at https://twiki.grid.iu.edu/bin/view/ReleaseDocumentation/