<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
Thanks everybody for all the warnings.<br>
I have already updated go-dev, and amigo.<br>
<br>
Shuly.<br>
<br>
Lincoln Stein wrote:<br>
<blockquote type="cite" cite="mid200406111205.19649.lstein@cshl.edu">
<pre wrap="">Hi Shuly,
Please take down AmiGO until the upgrade is effected.
Lincoln
On Thursday 10 June 2004 09:44 am, Sue Rhee wrote:
</pre>
<blockquote type="cite">
<pre wrap="">---------- Forwarded message ----------
Date: Wed, 9 Jun 2004 19:49:30 -0700
From: Bradley Marshall <a class="moz-txt-link-rfc2396E" href="mailto:bradmars@fruitfly.org"><bradmars@fruitfly.org></a>
To: Bradley Marshall <a class="moz-txt-link-rfc2396E" href="mailto:bradmars@bdgp.lbl.gov"><bradmars@bdgp.lbl.gov></a>
Cc: <a class="moz-txt-link-rfc2396E" href="mailto:go@genome.stanford.edu"><go@genome.stanford.edu></a>, <a class="moz-txt-link-rfc2396E" href="mailto:gofriends@genome.stanford.edu"><gofriends@genome.stanford.edu></a>
Subject: Important go-dev Security Patch releases.
Thanks to a random internet hacker we have become aware of a major
AmiGO security hole that was used to hose our server.
If you have a local AmiGO installation, run, don't walk, to
<a class="moz-txt-link-freetext" href="http://sourceforge.net/project/showfiles.php?group_id=36855&package">http://sourceforge.net/project/showfiles.php?group_id=36855&package</a>
_id=33201 to grab one of the new software releases.
AmiGO 1.x users should grab the go-dev-20040609-amigo1.5 release.
AmiGO 2.0 users can either grab the go-dev-20040609-amigo2.0
release or just do a cvs update.
For AmiGO 1.x users who want to touch their installation as little
as possible, the files of interest are
go-dev/perl-api/GO/CGI/Session.pm
go-dev/perl-api/GO/CGI/Analysis.pm
go-dev/perl-api/GO/CGI/HTML.pm
go-dev/perl-api/GO/IO/HTML.pm
You should be able to replace those 4 files with the versions in
the new release and be OK.
Brad
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
</pre>
</blockquote>
<pre wrap=""><!---->
</pre>
</blockquote>
</body>
</html>