Security Issues¶
IGV¶
Danger
Versions of IGV prior to 2.11.9 use a compromised version of log4j. Those versions are affected by a serious remote code execution issue. Please transition your software to use versions of IGV >= 2.11.9.
GSEA¶
Danger
Versions of GSEA prior to 4.2.3 use a compromised version of log4j. Those versions are affected by a serious remote code execution issue. Please transition your software to use versions of GSEA >= 4.2.3.
Rsync¶
Danger
Versions of Rsync prior to 3.4.0 contain six known vulnerabilities, some of which allow for arbitrary code execution. The risk to our system is minimal because of scoped user permissions. Nevertheless, Cheaha is now using version 3.4.1. Older versions have been removed, apologies for any inconvenience.