- galaxy-announce - lists.galaxyproject.org

GCC2017 Needs a Host!
by Dave Clements 14 Sep '15

14 Sep '15

Hello all, The Galaxy Community Conference has been held annually since 2010. GCC2016 <http://galaxyproject.org/GCC2016> will be held June 25-29 at Indiana University <http://indiana.edu/> in Bloomington, Indiana, United States. *We are now seeking proposals <https://wiki.galaxyproject.org/Documents?action=AttachFile&do=view&target=G…> from organizations interested in hosting GCC2017.* Galaxy's informal policy of rotating between North America and elsewhere every other year is now a formal policy: Hosts for GCC2017 need to be located outside of North America. GCC draws 200+ participants from data-intensive life science research. Participants come from around the world, from all career stages, and do research spanning the tree of life. Universities, hospitals and medical schools, research organizations, and industry are all represented, including some of the largest and most influential research organizations in the world. What do you need to host GCC2017, you ask? In approximately decreasing order of importance: - *Enthusiasm to plan and organize several events over 5 days for more than 200 people.* - Space for 4-6 parallel training sessions over two full days, with each space able to accommodate 25 to 75 participants. - Central meeting space with capacity for 250-300 people. - Affordability (or access to sponsorship funds; there's a reason we've always held GCC in academic settings) - Nearby space for breakouts, poster sessions and sponsors. - Nearby space for lunch, coffee breaks. - Good wifi for all events (that's 200+ people and their devices). - Space for hackathons for 2 days before the event. - Easy to get to by air. - Nearby, affordable housing, or easy walking distance or easy public transport from lodging options to conference facilities - Close proximity to a pub and other social hubs. Hosts get copious (and enthusiastic) organizational support from Galaxy's Outreach Team (who have been helping to organize GCC since 2011), and even more copious gratitude (even *adulation!)* from the Galaxy Community. See the *full call for host proposals <https://wiki.galaxyproject.org/Documents?action=AttachFile&do=view&target=G…>* for more details on what should be covered in proposals. Proposals are due by the end of 30 October 2015. If you are interested in possibly hosting GCC2017 then please contact Galaxy Outreach <outreach(a)galaxyproject.org> with any questions. Our goal is to announce GCC2017 at GCC2016 this coming June. Hoping to work with you in 2017! Dave Clements and the Galaxy Team <https://wiki.galaxyproject.org/GalaxyTeam> -- http://galaxyproject.org/ http://getgalaxy.org/ http://usegalaxy.org/ https://wiki.galaxyproject.org/

1 0

Mid 2015 Galaxy CloudMan release
by Dave Clements 03 Sep '15

03 Sep '15

*We just released an update to Galaxy CloudMan.* CloudMan offers an easy way to get a personal and completely functional instance of Galaxy in the cloud in just a few minutes, without any manual configuration or imposed quotas. Once running, you have complete control over Galaxy, including the ability to install new tools. This is the most complete update of the Galaxy on the Cloud platform to date with all the cloud components being built from the ground up. The following is a summary of the major changes: - *Galaxy on the Cloud*: all new galaxy and indices file systems, with Galaxy 15.07 release, ~200 preinstalled Galaxy tools, and nearly half a terabyte of updated reference genome data. - *Galaxy on the Cloud*: switched to a different Cloud Launch application, available athttps://launch.usegalaxy.org/ - *Galaxy on the Cloud*: Integrated Galaxy IPython Interactive Environments - *CloudMan*: Creating cluster shares is now fast (~30 seconds vs. hours) - Created a wealth of new documentation, including a description of the all new automated method for building private/custom instances https://wiki.galaxyproject.org/CloudMan/Building See the CHANGELOG <https://github.com/galaxyproject/cloudman/blob/master/CHANGELOG.md> for a more complete set of changes or just give it a try: see the all new Getting Started <https://wiki.galaxyproject.org/CloudMan/GettingStarted> documentation. -- http://galaxyproject.org/ http://getgalaxy.org/ http://usegalaxy.org/ https://wiki.galaxyproject.org/

1 0

July 2015 Galaxy Release (v 15.07)
by Martin Čech 03 Sep '15

03 Sep '15

The very-slightly-delayed July 2015 Galaxy Release is out! Full release notes: http://galaxy.readthedocs.org/en/master/releases/15.07_announce.html Highlights * *Interactive Environments* - The interactive environments (IE) framework features several updates this release and Galaxy is now distributed with a new IE for RStudio implemented by Eric Rasche. * *Workflow Editor Enhancements* - The workflow editor has been significantly revamped - it now uses newer tool form components and allow construction of workflows with tools explicitly producing output collections. * *Policies for Committers and Pull Requests* - The process for adding committers to the project and fielding pull requests has been formalized and documented in the source code. Three new committers have been added to the project - Björn Grüning, Nicola Soranzo, and Eric Rasche. *Thank you for using Galaxy! * The Galaxy Team https://wiki.galaxyproject.org/GalaxyTeam

1 0

September 2015 Galactic News
by Dave Clements 01 Sep '15

01 Sep '15

1 0

Galaxy Tool Shed Security Vulnerability - Repository uploads
by Nate Coraor 12 Aug '15

12 Aug '15

*DESCRIPTION* A security vulnerability was recently discovered by Peter Cock at the James Hutton Institute that would allow a malicious actor to upload new versions to repositories on which they have not been granted access. *AFFECTED VERSIONS* This issue affects versions of the Tool Shed beginning with 15.01. Earlier versions are not affected. *IMPACT* Because the Tool Shed is used to install software in Galaxy, if exploited, the impact could result in arbitrary code execution on Galaxy servers if a malicious tool is uploaded to a previously trusted repository, and that compromised version is subsequently installed by a Galaxy administrator. As such, Tool Shed administrators are strongly encouraged to update immediately. *INSTRUCTIONS* To apply the fix, first identify your current Galaxy release version using the `git branch` or `hg branch` commands. If you are on a 'release_YY.MM' branch, you can update with: % git pull or: % hg pull -u The process above can also be used to update to the 15.07 release if you are on the 'master' git branch or the 'stable' hg branch. If you are on the 'master'/'stable' branch and wish to remain on your current Galaxy major release, check the 'lib/galaxy/version.py' file to determine your major release version, then update to the appropriate branch: % git checkout -b release_YY.MM origin/release_YY.MM % git pull or: % hg pull % hg update release_YY.MM For the changes to take effect, YOU MUST RESTART ALL TOOL SHED SERVER PROCESSES. On behalf of the Galaxy Committers, --nate

1 0

Galaxy Security Vulnerability - Reflected XSS
by Nate Coraor 12 Aug '15

12 Aug '15

*DESCRIPTION* A security vulnerability was recently discovered by Scott B. Szakonyi at The Center for Research Computing at the University of Notre Dame that would allow a malicious actor to exploit the workflow import form to cause a user's browser to execute javascript not originating from within Galaxy. This could allow the malicious actor to gain unauthorized access to Galaxy accounts or client data. *AFFECTED VERSIONS* This issue affects all known versions of Galaxy. In early 2015, the Galaxy Team performed a large XSS audit, the results of which were applied to versions 14.10 and later. Using Galaxy versions earlier than 14.10 is not advisable. *IMPACT* Exploitation of reflected XSS vulnerabilities typically requires some coordination, but the consequences of exploitation can result in data or account exposure, so the risk of leaving the issue unfixed is moderate. Administrators of affected servers are encouraged to update immediately. *INSTRUCTIONS* To apply the fix, first identify your current Galaxy release version using the `git branch` or `hg branch` commands. If you are on a 'release_YY.MM' branch, you can update with: % git pull or: % hg pull -u The process above can also be used to update to the 15.07 release if you are on the 'master' git branch or the 'stable' hg branch. If you are on the 'master'/'stable' branch and wish to remain on your current Galaxy major release, check the 'lib/galaxy/version.py' file to determine your major release version, then update to the appropriate branch: % git checkout -b release_YY.MM origin/release_YY.MM % git pull or: % hg pull % hg update release_YY.MM For the changes to take effect, YOU MUST RESTART ALL GALAXY SERVER PROCESSES. On behalf of the Galaxy Committers, --nate

1 0

Galaxy Security Vulnerability - Authentication framework with LDAP
by Nate Coraor 12 Aug '15

12 Aug '15

*DESCRIPTION* A security vulnerability was recently discovered by Nicola Soranzo at The Genome Analysis Centre that would allow unauthorized access to Galaxy accounts on Galaxy servers using the LDAP authentication framework plugin. This is due to the fact that LDAP may be configured to allow anonymous binds, and the LDAP plugin does not check that binding with the provided username/password was not anonymous. *AFFECTED VERSIONS* The authentication framework is a new feature as of the 15.05 Galaxy release, so earlier versions are not affected. In versions 15.05 and later, the LDAP plugin is not used by default, so only Galaxy servers which have been configured to use this new functionality are affected. Galaxy servers using upstream delegated authentication (where authentication is performed by the proxy server, e.g. Apache or nginx) are not affected. *IMPACT* Administrators of affected servers are STRONGLY encouraged to update immediately, as the vulnerability allows unauthorized access to Galaxy accounts. *INSTRUCTIONS* To apply the fix, first identify your current Galaxy release version using the `git branch` or `hg branch` commands. If you are on a 'release_YY.MM' branch, you can update with: % git pull or: % hg pull -u The process above can also be used to update to the 15.07 release if you are on the 'master' git branch or the 'stable' hg branch. If you are on the 'master'/'stable' branch and wish to remain on your current Galaxy major release, check the 'lib/galaxy/version.py' file to determine your major release version, then update to the appropriate branch: % git checkout -b release_YY.MM origin/release_YY.MM % git pull or: % hg pull % hg update release_YY.MM For the changes to take effect, YOU MUST RESTART ALL GALAXY SERVER PROCESSES. On behalf of the Galaxy Committers, --nate

1 0

August 2015 Galactic News
by Dave Clements 31 Jul '15

31 Jul '15

1 0

June 2015 Galaxy New
by Dave Clements 31 May '15

31 May '15

1 0

May 2015 Galaxy Release (v 15.05)
by Jennifer Hillman-Jackson 14 May '15

14 May '15

*The May 2015 Galaxy Release is out!* Release Notes v 15.05 <http://galaxy.readthedocs.org/en/master/releases/15.05_announce.html> Release Highlights - *Authentication Plugins* - Galaxy now has native support for LDAP and Active Directory via a new community developed authentication plugin system. - *Tool Sections* - Tool parameters may now be groupped into collapsable sections. - *Collection Creators* - New widgets have been added that allow much more flexibility when creating simple dataset pair and list collections. - And *much more <http://galaxy.readthedocs.org/en/master/releases/15.05_announce.html>* The release notes have a new home at Read the Docs <http://galaxy.readthedocs.org/en/master/releases/15.05_announce.html>. We hope that you like the new format as much as we do! *Thanks for using Galaxy! * The Galaxy Team <https://wiki.galaxyproject.org/GalaxyTeam> -- Registration for the 2015 Galaxy Community Conference is OPEN! http://gcc2015.tsl.ac.uk *Love* *Galaxy*? We are inviting Galaxy power end-users as well as scientists and bioinformatics support researchers to *join us for the inaugural* *Galaxy Data Wrangling Hackathon* preceding the 2015 Galaxy Community Conference conference this July. http://gcc2015.tsl.ac.uk/data-hackathon

1 0