Hi everyone, I’d like to pass on that a long-term security vulnerability in GSAS-II was fixed as of GSAS-II version v5.10.0 (we are now at v5.10.2, #5847). I am recommending that you update immediately, but if you are unable to do that, please only open GSAS-II project (.gpx) files that you have created or that you received from people you trust which will also avoid this vulnerability. More about this can be found in a GitHub Discussions Announcement, https://urldefense.us/v3/__https://github.com/AdvancedPhotonSource/GSAS-II/discussions/377__;!!G_uCfscf7eWS!YeJJtF0Gk7wU_5GkAKrpb5ziAEj8Q62H08AcrYV6ZX1vWr9UuEEcLAjzA4xnUmFvs-Ui0RJvL-Rt47M$ <https://urldefense.us/v3/__https://gcc02.safelinks.protection.outlook.com/?url=https*3A*2F*2Fgithub.com*2FAdvancedPhotonSource*2FGSAS-II*2Fdiscussions*2F377&data=05*7C02*7Cgsas-ii*40aps.anl.gov*7Ccb58af42a7a8400c720c08df385ea3dc*7C0cfca18525f749e38ae7704d5326e285*7C0*7C0*7C639291651296896413*7CUnknown*7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ*3D*3D*7C0*7C*7C*7C&sdata=LsCjIbpbdaV6S3CN38WvaNQf4*2FQei1b6Bdy*2FabPAVks*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSU!!G_uCfscf7eWS!YeJJtF0Gk7wU_5GkAKrpb5ziAEj8Q62H08AcrYV6ZX1vWr9UuEEcLAjzA4xnUmFvs-Ui0RJvmSq-pfM$ >.
The changes have been tested, but it is possible that they will break something. Please report bugs to me, Bob or create an issue on the GitHub repo (https://urldefense.us/v3/__https://github.com/AdvancedPhotonSource/GSAS-II/issues__;!!G_uCfscf7eWS!YeJJtF0Gk7wU_5GkAKrpb5ziAEj8Q62H08AcrYV6ZX1vWr9UuEEcLAjzA4xnUmFvs-Ui0RJvZp9txyM$ <https://urldefense.us/v3/__https://gcc02.safelinks.protection.outlook.com/?url=https*3A*2F*2Fgithub.com*2FAdvancedPhotonSource*2FGSAS-II*2Fissues&data=05*7C02*7Cgsas-ii*40aps.anl.gov*7Ccb58af42a7a8400c720c08df385ea3dc*7C0cfca18525f749e38ae7704d5326e285*7C0*7C0*7C639291651296908931*7CUnknown*7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ*3D*3D*7C0*7C*7C*7C&sdata=NNieEoU7wIp7VGWkBaCoaHKPN6lZBsYVKmWNbBMO*2Bd8*3D&reserved=0__;JSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUl!!G_uCfscf7eWS!YeJJtF0Gk7wU_5GkAKrpb5ziAEj8Q62H08AcrYV6ZX1vWr9UuEEcLAjzA4xnUmFvs-Ui0RJvscMzY8c$ >) so it can be fixed. As noted in the GitHub Discussions Announcement, Dilanka Kaushal Hewage (GitHub: r3vpwnx), an expert on computer security, merits a lot of gratitude from the GSAS-II community for his help in this. Brian
_______________________________________________ GSAS-II mailing list [email protected] https://mailman.aps.anl.gov/mailman/listinfo/gsas-ii
