Tuesday, February 14, 2012

OSG 1.2.27 Update Notification

******************************
OSG 1.2.27 Update Notification
******************************

Date: February 14, 2012

Affected Components

The following components are affected:

* Curl
* Apache

Summary

This release contains the following updates to address security
vulnerabilities:

* curl (advisory ( http://curl.haxx.se/docs/adv_20120124B.html ))
* Apache httpd 2.2.22 (vulnerabilities/changelog ( http://www.apache.org/dist/httpd/CHANGES_2.2.22 ))

This update includes a security fix for curl to correct a
security vulnerability when using curl is using openssl. In
addition, Apache httpd has been updated to address multiple
security vulnerabilities.

Update instructions can be found on the OSG Twiki under the OSG
1.2 update instructions ( https://twiki.grid.iu.edu/bin/view/ReleaseDocumentation/OSG12UpdateInstructions ).

Additional Information
The release notes for the VDT 2.0.0p34 release underlying this
release can be found here ( http://vdt.cs.wisc.edu/releases/2.0.0/release-p34.html ).