June 2013 - galaxy-announce - lists.galaxyproject.org

(no subject)
by Dave Clements 30 Jun '13

30 Jun '13

1 0

Galaxy Security Notification
by Nate Coraor 12 Jun '13

12 Jun '13

A security vulnerability was recently discovered by Björn Grüning with Galaxy's "user impersonation" feature that can expose an administrator's active history to users whom they impersonate. Only Galaxy instances with `allow_user_impersonation = True` set in their configurations are affected, and only if an administrator makes use of the impersonation feature. By default, user impersonation is disabled. A fix (id: 9d42f1e32efb) has been provided in the stable branch of Galaxy. To apply the fix, ensure you are on the stable branch and upgrade to the latest changeset: % hg branch stable % hg pull -u For Galaxy installations on relatively old versions that administrators are not yet ready to upgrade, there are three workarounds. First, the patch can be downloaded and applied manually: % wget -o security.patch https://bitbucket.org/galaxy/galaxy-central/commits/9d42f1e32efb654fda1e011… and then: % hg patch security.patch or: % patch -p1 < security.patch Second, the impersonation feature can be disabled by setting the following option in Galaxy's configuration file: allow_user_impersonation = False In all of the above cases, the Galaxy server process(es) must be restarted for the change to take effect. Third, the feature can be left enabled and unpatched, and the vulnerability can be worked around by educating administrators who use the feature. As long as a new history is created by the administrator prior to switching to the impersonated user, no data will be exposed to the impersonated user. --nate Galaxy Team

1 0

GCC2013 Regular Registration closes June 14
by Dave Clements 04 Jun '13

04 Jun '13

Hello all, This is a reminder that registration<http://wiki.galaxyproject.org/Events/GCC2013/Register>for the 2013 Galaxy Community Conference (GCC2013<http://wiki.galaxyproject.org/Events/GCC2013>) closes June 14*, just ten days from today. *Registering now<http://wiki.galaxyproject.org/Events/GCC2013/Register>avoids the 100% late registration surcharges, and guarantees you a spot in the Training Day sessions<http://wiki.galaxyproject.org/Events/GCC2013/TrainingDay>you want to take. *Registration is still a bargain with the full 3-day registration starting at ~ €165 for post-docs and students (that is just €55 per day). The program <http://wiki.galaxyproject.org/Events/GCC2013/Program> features 15 Training Day sessions<http://wiki.galaxyproject.org/Events/GCC2013/Program#Day_0:_Training_Day.2C…> in 5 tracks on 12 different topics, 25 Talks<http://wiki.galaxyproject.org/Events/GCC2013/Abstracts#Talk_Abstracts> on topics ranging from Reproducibility<http://wiki.galaxyproject.org/Events/GCC2013/Abstracts#Events.2FGCC2013.2FA…> to Exploiting Galaxy<http://wiki.galaxyproject.org/Events/GCC2013/Abstracts#Events.2FGCC2013.2FA…> , 23 Posters<http://wiki.galaxyproject.org/Events/GCC2013/Abstracts#Poster_Abstracts> (and counting), 2 Lightning Talk sessions, and a end-of-conference event at an historic venue high above Oslo. GCC2013 is a great opportunity to share best practices from and network with other researchers also facing the challenges of data-intensive biology. Ser frem til å se deg i Oslo! GCC2013 Organizing Committee PS: and please help get the word out<http://wiki.galaxyproject.org/Events/GCC2013/Promotion> . * Not June 7, as had been stated earlier in several places. -- http://galaxyproject.org/GCC2013 http://galaxyproject.org/ http://getgalaxy.org/ http://usegalaxy.org/ http://wiki.galaxyproject.org/

1 0

June 3, 2013 Galaxy Distribution
by Jennifer Jackson 04 Jun '13

04 Jun '13

June 3, 2013 Galaxy Distribution <http://wiki.galaxyproject.org/News/2013_06_03_Galaxy_Distribution> *Complete News Brief <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_03>* *Highlights:* * Visualization tool updates to Scatterplot <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_01#Scatterplot> and Trackster <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_01#Trackster>. * Job distribution, error tracking/management, and reporting function improvements to Admin <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_01#Admin> & Core <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_01#Core>. * Multiple Tool <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_01#Tools> updates, History and Dataset <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_01#Histories> upgrades, and other related UI <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_01#UI> enhancements. * New features and fixes added to the Tool Shed <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_01#Tool_Shed> and related components. * Python 2.5 Support /officially ended/ <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_01#Python_2.5_Support_H…>. * Plus newly merged Pull Requests <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_01#Pull_Requests_Merged> and links to tickets covering key Bug Fixes <http://wiki.galaxyproject.org/DevNewsBriefs/2013_06_01#Bug_Fixes>. / http://getgalaxy.org/ /http://bitbucket.org/galaxy/galaxy-dist/ /http://galaxy-dist.readthedocs.org/ // new: $ hg clone https://bitbucket.org/galaxy/galaxy-dist#stable upgrade: $ hg pull $ hg updaterelease_2013.06.03 /Thanks for using Galaxy,/ The Galaxy Team <http://wiki.galaxyproject.org/Galaxy%20Team>

1 0